

b6 I 
'hlZ 


rHr^ -‘h^ I 






ALL IMFORMATIOK COKTAIilED 

tlEHZIW IS DMCLA3SIFIEP 

DATE 06-02-2008 BY 60322uclp/stf)/rds 





From: 

Sent: 

To: 

Subject: 


(OTD) (FBI) 
WpHnPftriaxy .liilw 1fl ?nn7 9; 16 AM 

kOTD) (CON): r 


j:OTD)(CON)t 




](OTD) (CON) 


Ier) 



FBI's Secret Spyware Tracks Down Teen Who Made Bomb Threats 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


Our secret is out!!! 

http://intranet.fbinet.fbi/BreakinaNews/DiSDForm.htm?iD=12626&Source=httD%3a%2f%2fintranet%2efbinet%2effai% 

2fBreakinaNews%2fAllltems%2ehtm 


FBI’s Secret Spyware Tracks Down Teen Who Made Bomb Threats 


ALL IHFOPHATION COMTAIHED 

HEREIH IS DMCLASSIFIED 

DATE 06-02-2008 BY 60322uclp/stp/rds 


SEATTLE, WA ~ FBI agents trying to track the source of e-mailed bomb threats against a 
Washington high school last month sent the suspect a secret surveillance program designed to 
surreptitiously monitor him and report back to a. government server, according to an FBI affidavit 
obtained by Wired News. 

The court filing offers the first public glimpse into the bureau’s long-suspected spyware 
capability, in which the FBI adopts techniques more common to online criminals. The software 
was sent to the owner of an anonymous MySpace profile linked to bomb threats against 
Timberline High School near Seattle. The code led the FBI to 15-year-old Josh Glazebrook, a 
student at the school, who on Monday pleaded guilty to making bomb threats, identity theft and 
felony harassment. In an affidavit seeking a search warrant to use the software, filed last month 
in U.S. District Court in the Western District of Washington, FBI agent Norman Sanders 
describes the software as a "computer and internet protocol address verifier," or CIPAV. 


Wired.com 
2:00 AM 
By Kevin Poulsen 
July 18, 2007 


Attachments: 


Link to news article 



From; 

Sent: 

To: 

Cc: 

Subject: 


I l (SE) (FBI) 

Tuesday. Jifne 12 2007 2:34 P M 

I l (OTD) (FBI): I l (OTD) (CON);[ 

r l (SE) (FBi): L _ _ _ | (SE) (OGA) 

FW: Associated Press Article 



b6 

bVC 


UNCLASSIFIED 

NON-RECORD 


- below is the news article we wQuldJike_ to_sen d containing the CIPAV. \ am meeting with the judge at 1 :30PST and 


I - oeiow IS tne news amcie we w 
Rope to deploy afterwards* Thanks, j 


I 


SA[ 

FB 


Seattle 


[(Fax) 

INfiXtdlDCiL 


ALL IHFORHATION COHTAINED 

HEREIN IS UNCLASSIFIED 

DATE 06-02-2006 BY 60322ucip/stp/cds 


be 

b7C 

b2 


Original Mess age--— ^ g 

From: LZ—ZZ-ZTiSE) (FBI) b7C 

Sent: Tuesday. June 12. 2007 11:18 AM 

To: i | (SE) (FBI) 

Subject: Assoaated Fress AttiBe 


UNCLASSIFIED 

NON-RECORD 


Here is the email link in the styie of the Seattle Times 

> 

> 

> Bomb threat at high school downplayed by local police department 

> 

> Technology savvy student holds Timberline High School hostage.... 

> 

> Full story; 

http://seattletimes.nwsource.eom/html/nationworld/200374323 1 webteensex 1 1 .html 

> 

> 

> ^ r-...:— ^ — - ,.r - .,. ===:=;== 

> 

> TO SUBSCRIBE TO THE SEATTLE TIMES PRINT EDITION 

> Call (206) 464-2121 or 1-800-542-0820, or go to 

> http://seattletimes.coni/subscribe 

> 

> HOW TO ADVERTISE WITH THE SEATTLE TIMES COMPANY ONLINE 

> For information on advertising in this e-mail newsletter, 

> or other online marketing platforms with The Seattle Times Company, 

> call (206) 464-2361 or e-mail websales(Siseattletimes.com 


1 







> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 


TO ADVERTISE IN THE SEATTLE TIMES PRINT EDITION 
Please go to http://seattlctitnes.nwsource.com/contactus/adsales 
for information. 


For news updates throughout the day, visit http://www.seattletimes.com 


Copyright (c) 2007 The Seattle Times Company 
www.seattletimes.com 


Here is the full article. 
Friday. June 8, 2007 



locaS police department. 


The Associated Press 

LACEY Wash. — Technology savvy student holds Timberline High School hostage. The suspect is still unknown 
after several bomb threats and 5 days of school evacuations. Anonymous bomb threats to high schools are a 
growing trend in rural America. 

Timberline High School is the latest victim in an increasing trend of computer related extortion schemes. These 
schemes ail involve a similar pattern: several threats made over a week by students utilizing technology. These 
threats receive low media attention. School officials and law enforcement downplay the risk associated with the threats 
and disregard pleas from concerned parents and students. 

Although similar incidents have occurred in Kentucky, Michigan, and Virginia, the Timberline threat shows an escalation in 
sophistication and computer hacking skills. 

[Statistics to come on each threat Including; duration of threat cost estimate for damage, and psychological factors] 

The most significant difference with the Timberline threat is the use of My Space and obfuscated emails. According 
to sources at Timberline High School, the subject uses other students' emails to send the bomb threats, most often going 
by the name of "Doug." Additionally, the suspect has set up a My Space page to taunt students. According to 
"Doug ", # students have joined the My Space page. A frenzy of students are trying to identify "Doug", yet none have 
succeeded. 

In response to the students' race to identify the suspect, "Doug" comments 
[Place comment here] 

I 

School officials have given parents and students little assurance of the threats, ending soon. Timberline Principal Dave 
Lehnis stated, "While the administration and law enforcement believe the school is safe and secure, we understand if 
parents want to keep their students at home and we will work with them to get the homework they need." 

The emotional toll on the students can be seen by the significant absentee numbers. If school officials and law 
enforcement are not taking this threat seriously, the parents are. 


2 


From: 

Sent: 

To: 

Subject: 


J(OTD) 

|(0TD)(C0N};F 


Thursiiav nc>npmhpr_ni 2005 10:3 3 AM 

(OTD)(CON) 

FW: Denver Search Warrant 


OTD)(CON);[ 


be 

b7C 


SENSITIVE BUT UNCLASSIFIED 
RECORD 31SQ.DN-64862 


See below for email account to send file 


ssaF 


] 


Cryptologic & Electronic Analysis Unit 

Digitial Evidence Section, Operational Technology Division 

\/A 



secure voice 
secure fax 


ALL IMFORHATION COKTAIHED 

HEREIN IS UNCLASSIFIEU 

DATE 06-11-2008 BY 60322uclp/stp/cds 


b2 

b6 

b7C 


— -Original Mess age — 

From: [ (FBI) 

Sent: ThurcHav PtoromKor Ql, 2005 I0:30 AM 

To: L_^ l(OTD) 

Subject: RE: Denver Search Warrant 

SENSITIVE BUT UNCLASSIFIED 
RECORD 315Q-DN-64862 


Please send it to 


As you might infer, I have never set up an e-mail with my internet caf6. 
Thanks, 


b6 

b7C 



— Original 

From: 

Sent: 

To: 

Subject; 


1 


essaqe-- 


](OTD) 


Thursday, December 01, 2005 8:12 AM 
I IDM^ (FBI) 

RE: Denver Search Warrant 


SENSITIVE BUT UNCLASSIFIED 
RECORD 315Q-DN-64862 


Do what you want - we only need to get the file back to you 


b2 

b7E 


ssa F I 

Cryptologic & Eloctronic Analysis Unit 

Digitiol Evidonce Soction, Operational Technology Division 


1 






il^uflntico.VA 


O 


b2 

b6 

b7C 


P 

f 

secure voice 
secure fox 


- — origmaLaessaofci”' 

From: | [DN) (FBI) 

Sent: Wednesday. Nove mber '}n 

To: I ... irO TOb I , llfTO) (FBI) 

I 1 (ON^TfS ^ I fPN) (FBI) 

Subject: Denver Search Warrant 

SENSITIVE BUT UNCLASSIFIED 
RECORD 315Q-DN-64862 


:b6 

b7C 


The AUSA gave us the thumbs up on the affidavit this afternoon, and the judge just signed off on the SW a few 
minutes ago. Since CT Watch, following the release of the HR, was calling me last night for new info, Tm updating 
them to avoid one of those unpleasant 3:00am MST phone calls. ERF advised that they have everything ready ^7 
pending receipt of the SW. We plan to meet with the source tomorrow and have him transmit the CIPAV. 


1 wULbe faxing a copy of the SW to your number atl | Our Question: Is there any reason that we can't 

-b2 

- _ - b7E 


Thanks, 



ngnvygr niwiQi 


u 


b6 

b7C 

b2 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


2 








Message 


Page 1 of 3 


* t 


(OTD) (COM) 


ZZZIloTDKCON} 
](ITD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON.RECORD 


From; I k OTD) 

Sent: Friday, October 21, 2005 10:06 AM 

To: |~ t OTD)(CON);[ 

Cc: I kOTD)ICON): 


Subject: FW: CIPAV request for El Paso 


be 

b7C 


ssa[ 


Cryptologic & Electronic Anatysis Unit 
Oigitiol EviderKO Section, Operationol Technology Division 
Quontico. VA 

‘o 

P 
f 

secure voice 
secure fox 

-Qripinarm<;gaQg- 


I 

To:[ |(OTD) 

Subject: RE: CIPAV request for EPD 


Fromz f \ eP) (FBI) 

Se nt: Thursday. Octo ber 20, 2005 11:26 AM 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 06-11-2008 BY 60322uclp/3tp/rds 


he 

hlC 

h2 


b6 

b7C 


b6 

:b7C 

-b2 

b7E 


SENSITIVE BUT UNCLASSIFIED 
NON>RECQRD 


:b2 

b7E 


Any idea of a timeframe for approval from OGC? 

Please advise if you need any additional info from EP. 

Thanks. 

1 he 

b7C 


Ori ginal Message-— 

From: | t OTD) 

Se nt: Wednesday, Octo ber 19, 2005 10:42 AM 
To; | I CEP) (FBI) 

Subject: RE: QPAV request for EPD 


7/27/2007 







Message 


Page 2 of 3 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


You can see my changes by opening the file and selecting File/Document/Review. These changes reflect 
accuracy from a tedinical standpoint. Our OGC attorney is still reviewing it for legal accuracy. 


ss A I 

Cryplologic & Electronic Anolysis Unit 

Di'giikil Evidence Section, Operofional Technology Division 


O 

P 

f 

secure voice 
secure fax 




b2 

b6 

hlC 


— Or iginal Message- 

From:n^ 



](EP) (FBI) 


t: Wednesday. O ctober 19, 2005 11;53 AM 

kmp) , 


]{EP) (FBI); 


Subject: CIPAV request for EPD 


1(EP) (FBI) 


](EP) (FBI); 


(EP) (FBI); 


b6 

b7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


As we discussed this morning, El Paso is interested in utilizing the CIPAV technique for a 279B 
matter. I've attached the search warrant application and affidavit, as well as the opening EC for 
background information. The EPD CDC and AUSA assigned to ^e investigation have both 
approved the affidavit. Please advise if there are any technical changes necessary. I've also asked 
our tech agents to initiate the formal request through RMS. 


Thanks for your assistance, 


bPD Cyber Squ ad 


b6 

b7C 

b2 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


7/27/2007 






Page 3 of 3 

SENSITIVE BUT UMCLASSIFIPn 


imnmi 


Message 


Page 1 of 1 



(OTD) (CON) 


From; j |(OTD) 

Sent: Wednesday. October 19, 2005 2:28 PM 

To: I | OTD)(CON) | 

I l (ITD) (FBI) 

Subject: CIPAV - El Paso field office 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


ITDKCON) 


hS 

hlC 


ALL IKTFORHATTON COMTAIHED 

HEREIH IS OTCLAS3IFIED 

DATE 06-11-2008 BY 60322ucip/3tpyrds 


I have a draft search warrant affidavit on my desk for deployment of CIPAV from Si 

Iei Paso field office, case filel I 



The searcluu 
IP address! 
MAC address 





duthnrize collgction af the fo liftwino data (same as prior CIPAV coltections i 
iables ~ 

that can assist with identifying computer users, computer software instaHed. computer hardware Installed. 



REMINDER: in compliance with these search warrants, the field office must be the entity that reviews the 
collected data. You can NOT conduct any research, on the Internet or otherwise, based on the collected data to 
assist the field even if requested by the field office. 


Cryptologic & Electronic Anoly$i$ Unit 

OigHiol Evidence Section, Opercrtionol Technology Division 



b2 

be 

b7C 


ecure voice 

ecure fox IP address, MAC address, etc. data was in the unsealed Affidavit, so it is 

released here. 


SENSITIVE BUT UNCLASSIFIED 


7/27/2007 






.Message 


Page 1 of 2 


(OTD) (CON) 

From: j 

(OTD) 


Sent: 

Monday, August 15, 2005 8:31 AM 


To: 

(OTD)(CON)J 

IfOTDKCON) 

Cc: 

(ITD)(FBI);| 

_ _ l(OTD) (FBI);1 


Subject; new IPAV deployment brewing for Honolulu 


(OGC) (FBI) 


b6 

b7C 


case file#Cy ~ " _~1 


h2 

b7E 


o Internet Protocol address 
0 Media Access Control address 

o Open communication ports 


ALL IHFOWIATIOH COHTAIHED 

HEREIN 13 UNCLASSIFIED 

DATE 06-11-2009 BY 60322uclp/stp/rds 


o List of programs running 

o Operating system type, version, and serial number 
o Browser type and version 
o Language encoding 

o The URL that the target computer was previously connected to 
o Registered computer name 


o Registered company name 
o Currently logged in user name 


We never discuss how we collect the above i n the warrants/affidavits or with case oaents, AUSAs. 

_ squad supervisors, outside ggenci es^tcJ. ~ ~ I 


b2 

b7E 


Any questions, comments, concerns - pis see me at your earliest convenience. 


"I- pis ensure that the contents of this email is communicated td 

I Let the me the date that you 

provide this information to them (and the names of the people) for documentation purposes. 
Thanks. 


b6 

b7C 

b2 

b7E 


i 


7/27/2007 







Message 


Page 2 of 2 


SSA |_ _ 1 

Cryptologic & Electronic Analysis Unit 

Digitial Evidence Section^ Operational Technology Oivision 

O 

P 

f 

secure voice 
secure fax 




be 

b7C 

b2 


7/27/2007 




Message 


Page 1 of 2 


(OTD) (CON) 


From: 


]{OTD) 


Sent: Wednesday, August 10. 2005 8:51 AM 

To: 


Cc: 


(NO) (FBt) 
(OTD)(CON); 


Subject: CIPAV 


]{OTD)(CON) 


UNCLASSIFIED 

NON-RECORD 


be 

b7C 


I 1 - do NOT use the Google notes provided by I | in your case file! If you found this info helpful, pis 

recreate it yourself and then place irt your case file. Also, our pre-deployment policy is for a TTA in your field 
office to submit an official request. It appears this request has yet to be submitted. Pis contact a TTA 
immediately. 

b7C 

based on the current search warrant, pis be prepared to terminate collection on our end on 8. 1 9.05 at b2 
08:29AM unless we have a copy of a new signed warrant in hand prior to that time. 



SSA | I 

Cryptologic & Eloctroni^Analysis Unit 

Digitial Evidence Section, Operational Technology Division 

Quontico, VA 

O 

P 

f 

secure voice 
secure fox 


Original Message 

From: I l fQTD¥CON1 

Se nt: Tuesday, Augu st 09, 2005 2:51 PM 
To: ) _ _ H fNOI (FBI) 

Cc:| (OTD) 

Subject: QPAV Instructions, Link, and Misc Info 


ALL INFORBATION COHTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 06-11-2008 BY 60322uclp/stp/i:ds 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


SA | I 

Per our conversation today here is the link that you will use for testing 


h2 

blE 



Also, you will find some misc info that \ collected via Google yesterday - For what if s worth.. 


7/2712007 







Message 


Page 2 of 2 



be 

b7C 


UNCLASSIFIED 


UNCLASSIFIED 


minmi 




Message 


Page 1 of 2 


j 


(OTD) (CON) 


From: 


(ITDKCON) 


Sent: Th ursday, March 3 1. 2005 5:37 PM 

l (»TD) 


To: 


[ 


Subject: RE: Logs 


bo 

b7C 


UNCLASSIFIED 

NON.RECORD 


This was the one I called you about the other dav. iust to close the loop on the email part. When vou get a 
chance, come b v so we can show yoq 
I I I think you will like it. 



h2 

h7E 


— Or iginal Message 

From; ! ~l (ITD) 

Sant; Tup«;flav Marrh 2005 9:59 AM 

To:l (rTDXCON) 

Subject: FW: Logs 


ALL IKFOPHATIOH CONTAIHED 
HEPEIH 13 UHCLA33IFIED , 

DATE 06-02-2003 BY 60322uclp/3tpyrds 


b6 

blC 


UNCLASSIFIED 

NON-RECORD 


See below. Philly still claims to be having a problem getting 

Or iginal Message 

From: i (FBI) 

Sent: Tuesday, March 29. 2005 9:26 AM 

l (ITD) 

Subject; Logs 

UNCLASSIFIED 

NON-RECORD 


b2 

b7E 


b6 

b7C 


izzi 

r 

I I Can vou have 

1 I and will be back tomorrow. 



]when he gets a chance, [ 



b2 

b7E 

b6 

b7C 


SA 

FBI FhOadelphia 
600 Arclli Street 
8th Floor 

:ia, PA 


(Work) b6 

(Cell) 


7/27/2007 



Message 


Page 2 of 2 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 






Message 


Page 1 of 1 




Sent: 

To: 


Thursday, March 24, 2005 5:33 PM 


Subject: F] 


UNCUtaslfl 
NON^ECORD 


] (lTD)(CON) 

( 3 ) 


iPIED 


DATE; Q3-07-20Q8 

CLASSIFIED BY 60322ucip/stp/rds 

REASOH; 1-4 (c) 

bl DECLASSIFY Olf: 08-07-2033 


Can som eone call the Agent identified below and assist with downloading the evidence from the 3 Philly search 
warrants I | Thanks. b 2 

b7E 


Or iginal Message — 

From:r~ 


Im (pBi) 


Sant; Thiircjflav Marrh 24, 2005 4:29 PM 


To 

Cc: 


I 


Subjectj^ 


;iTD) 

KPH) (FBI) 


(S) 


UNCi 


;iFiED 


NQ^i-REC^RD 


ALL INFOPilATION COETAINED 
HEREDI IS OTCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


bi 


be 

b7C 




I 

FBI Philadelphia 


600 Arch Street 


8th Floor 

Philadelphia, PA 19106 


(Work) 
(C ■ 






be 

b7C 



7/27/2007 





Message 

• V 


Page 1 of 3 


(OTD) (COM) 


From: F 


](1TD) 


Sent: Wednesday. March 02. 2005 2:32 PM 


To: 


klTD)(CON) 


Subject: RE: ELSUR 


UNCLASSIFIED 

NON-RECORD 


ALL I5JF0PMATI0N CONTAIHED 

HERE in 13 UHCLASSIFIED 

DATE 06-U-2008 BY 60322uclp/stp/rds 


b6 

b7C 


he's claiming 



is the only one he rx’d when clicked the 


download button 


b2 

bVE 


Or iginal Message 

From; | (rTDXCON) 

Se nt: Wednesday, M arch 02, 2005 11:20 AM 
To; I K UD) 

Subject: RE: ELSUR 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


The closer ! I is merely the ! T of the dosed file. The contents are only the^ I 

The closed file itself is the data file. 

b7E 


Original Message 

From: ! I HTm 

Se nt; Tuesday, March 01. 2005 4:54 PM 

To; I I flTDVCON^ ^7 

Subject: FW: ELSUR 


UNCLASSIFIED 

NON-RECORD 


me and not the case agent, thanks. 


pis respond to 


b2 

b7E 


Ori ginal Message 

From; ! "I fSEUEBD 

Se nt: Tuesday. Marc h 01, 2005 4:52 PM 

To; L I HTDI be 

Subject: RE: ELSUR b7c 


UNCLASSIFIED 

NON-RECORD 


I believe it was 2/07/04 It downloaded asf 
file. 


am unable to view this 


b2 

b7E 


Ori ginal Message- 

From: F 


KITD) 



7/27/2007 






Message 


Page 2 of 3 


Sen t; Tuesday. Marrh 01 2005 11:57 AM 
To: I- I rSE) (FBI) 

Subject: RE: ELSUR 

UNCLASStFtED 

NON-RECORD 


what was the date of download? 


— -Or iginal Message 

Fromr f 1 (SE) (FBI) 

Se nt; Tuesday, Marc h 01, 2005 12:49 PM 
Toi l I (ITD) 

Subject: RE: ELSUR 

UNCLASSIFIED 

NON-RECORD 



b6 

— O riginal Message — - b 7 c 

From l I flTDl 

Se nt: Tuesday, March 01, 2005 5: 17 AM 

To; I _ 'K SE) (FBI) 

Cc: l I fSE) (FBI) 

Subject: ELSUR 


UNCLASSIFIED 

NON-RECORD 


b2 

b7E 


b2 

b7E 


SSA I I 

Cryptographic & Electronic Analysis Unit 

Digitial Evidence Section, Investigative Technology Division 

Quontico< VA 


P be 

f b7C 

secure voice 
secure fox 


UNCLASSIFIED 


UNCLASSIFIED 


7/27/2007 






Page 3 of 3 


Message 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


26 


imnmi 



) 


Message 




Page 1 of 1 



Sent: 

To: 


Tuesday, March 01, 2005 8:37 AM 

llTD)(CON) 


Subject: FW 


CLASSIFIED BY 60322ucip/3tp/rds 
REASOH: 1.4 (c) 

DECLASSIFY OK: 08-07-2033 


<S) 


bl 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


(S) 



•U fiqinai wessade 

From: 


](PH) (FBI) 


Sent: Tuesday, March 01, 2005 8:15 AM 

To J wrrrw 

Object 


b6 

b7C 


ALL IKFORHATIOK CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOW OTHERWISE 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


bl 


FBI Philadelphia 
6®® Arch Street 
8th Floor 
Philadelphia, PA 19106 


(Work) b 2 

(Cell) 


(S) 


SENSITIVE BUT UNCLA IFIED 



SENSITIVE BUT UNC 





7/27/2007 


















Message 


Page 2 of 2 









Page 1 of 1 

OTD) (CON) 




Friday, January 21, 2005 9:33 AM 

NY) (FBl);[^ 

(CyD) (FBI): 
ITD)(CON) 




(NY) (FBI) 
;CG) (FBI): 


(CG) (FBI): 


UNCLA 


NON- 



Dota Intercepi Technology Untt/Software Collection Group 
Digitial Evidence Section, investigative Technology Oivbion 



DATE; 08-07-2008 

CLASSIFIED BY 60322ucLp/stp/i:d3 

REASON: 1.4 (c| 

DECLASSIFY ON: 08-07-2033 


secure voice 
secure fax 


UNCL^SIFIED 


ALL INFOFHATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


7/27/2007 









SE^T 

Page 1 of 1 

(OTD) (CO?S!) 

/ ^ 





ligative Technology Division 


MTE; 08-07-2008 

CLASSIFIED BY 60322\iclp/stpy'Ed3 

REASOH: 1.4 (c) 

DECLASSIFY ON: 08-07-2033 


ecure voice 
ecure fax 


IFIED 


ALL INFOFHATION CONTAINED 
HEPEIN IS UNCLASSIFIED EXCEPT 
TjJHEPE SHOM OTNERNISE 


7/27/2007 








ALL IF^FCRHATIOK COJ3TAITIE& 

HEREIN IS OMCLASSIFIED 

HATE 06-02-2008 BY 60322ucip/3tp/rds 
























From: 

Sent: 

To: 

Cc: 

Subject: 


SENSITIVE RUT UMC 
RECORD 


](OTD) (FBI) 


Mnnriatf NnvRmhPrnfi 2006 6:29 PM 

iOTDKFBI) 




IfiTn^ /p Ri) 



(S) bi 


DATE: 08-07-2008 

CLASSIFIED BY 60322ucip/stp/rds 

REASON: 1.4 (c) 

DECLASSIFY ON: 08-07-2033 






— Original M 

From: 

Sent: 

To: 

Cc: 

Subject: 


ess^ae: 


](OGC) (FBI) 


Monday, October 30 , 2006 3:55 PM 


(FBI); r 


SENSITIV E BUT UN 

recore[ 





](OTO) (FBI); 


(OTD) (FBI)[ 


(OGC) (FBI) 


bl 


b6 

b7C 



b7A 


Absent the minor recommended additions in yellow in the above attachment, 1 concur with your drafts. Good job. 

b6 
b7C 


Assisianr ijeneral Counsel 




s 


T 


5 






r- CM 















Information Technology Specialist 
Operational Technology Division 
0 - 


— Original Messac 

From: I 

Sent: wpf ]| 

To; I 

Cc; I 

Subject: FvF 


J(OTD) (FBI) 

L 2006 9:23 AM 

kozq)(F8i) 


(OTD) (FBI) 


SENSITIVE BUT UNi 
NON-RECORD 


[RED 



Original Message 



) (FBI) 
3:34 PM 
OTD) (FBI) 
1) (FBI) 


SENSITIVE BUT UNC 


NON-RECORD 



File: CIPAV Aff.wpd » « File: CIPAV SW Applicatron.wpd » 
















ALL IHFORHATIQH CQHTAIMED 
HEFZIH IS OTCLA3SIFIED EXCEPT 
■WHERE SHOWN OTHERWISE 


From: 

Sent: 

To: 

Cc: 

Subject: 


|(OTD) (FBI) 


ThiirsfIriv DpnpmbPf 14, 2006 1 1 ;05 AM 

rOTD) (FBI) 

Ibip) (FBI);| 

\/r\Tn\ 


SENSITIVE BUT UNi^t^SIFIED 
RECORD 268-HQ-130S912-SOQ 


OTD)(FBI):i 


(ITD) 


b6 

b7C 

hi 


(S) 

DATE: 06-02-2008 

CLASSIFIED BY 60322ucip/stp/rds 

REASON: 1.4 (c) 

DECLASSIFY ON: 06-02-2033 





(S) 





SEeCT 


ss/[ 


] 


Sof6fl/are Development Group (SDG) 
Cryptologic Electronic Analysis Unit (CEAU) 
Digital Evidence Section (DES) 

Cinf^ratinnul Tf^r.hnnlngy Division (OTD) 
’desk) 
cell) 


he 

hic 

h2 



Information [ecnnology Specialist 
0 perat ional Technology Division 
Office -I 
Mobile 
Pager \ 


b6 

blC 


Oiiginal r^p-ssaae- — 

From: 

Sent; 

To: 

Cc: 

Subject: 

SENSITIVE BUT UN 
RECORD 


l;OTD)(FBI) 



57 AM 


1 (OTD) (FBI) 


b7A 


b6 

hlC 


bl 












1 (S) 

Absent the minor recommended additions in yellow in the above attachment, I concur with your drafts. Good job 








s 


T 


(OTP) (FBI) 


DATE: 06-02-2008 

CLASSIFIED BY 60322uclp/scp/i:ds 

PZASOH: 1.4 (c) 

DECLASSIFY ON: 06-02-2033 


From: 

Sent: 

To: 

Cc: 

Subject: 


(OGC){FBI) 


Wednesday. Mav 24 2QQ6 1:57 

1 (OTD)(FBI) 

IfOTD) (FBI); 


££Hil 


(OTD) (FBI); 


b6 

.b7C 

J(ITD) 


RE: PH matter 06-582 - New Concern 


JOGC) (FBI) 


SECRET//NOFORN 
RECORD 315 



Assistant General Counsei 
National Security Law Branch 
Office of General Counsel FBI 


Voice 
Pager 
Secure Fax 
Fax 


b6 

b7C 

b2 

ALL INFOPHATIOSr COJITAIMED 
HEREIN IS UNCLASSIFIED EXCEPT 
UHERE SHOWN OTHERWISE 


bl 


— Original Message — 

From: [ 

Sent: 

To: 

Cc: 

Subject; 


~l 0TD)(FBn 

Wednesday, Mav 2 4. 2006 PM 


^C)(F8I) 


l(OTD) 

RE: PH matter 06-582 - New Concern 




^OTD) (FBI); 
JOGC) (FBI) 


(HU) (FBI) 


b6 

b7C 


bl 



CZZI 


Information technology Specialist 
Op erational Technolo gy Division 
0-| 

(Vi- 


be 

b7C 




From: 
Sent: 
To: 

Cc; I 


Wednesday, my 


OGCXFBI) 

24, 2006 10:55 
□OTD) (FB^ 
PTD) (FBI){ 


Subject: RE: PH matter 06-582 • New Concern 


3rro) (FBI):[ 
JOGC) (FBI) 


JOTD)(FBI) 


12 


s 


T 






SECRET//NOFORN 
RECORD 31 S 




Assistant General Counsel 
National Security Law Branch 
Office of General Counsel FBI 

Voice 


Pager 
Secure Fax 
Fax 


b2 

b6 

b7C 


— Original Message — 

From.* I K OTO) (FBI) 

Sent Wedri^av . May 24, 2006 8:49 AM 

To l ~~T:rTO) (FBI): ! r OTOMFBn j l(OGQ(FBI) 

Cc ^ ^r OTD) (FBI); | l (OGC) (FBll 

Subject; FW: PH matter 06-582 - New Concern 

SECRET//NOFORN 
RECORD 315 


bl 



Original Message- 

From: ^ 

Sent: ^ 

To; 

Cc; 


Subject: 


l0GC)(FBI) 

aday. May ii, 2006 5:42 PM 
3oTD) (FBI) I 
JOTO) (FBI) 


]OGC) (FB 


RE: PH matter 06-582 - New Concern 


SECRET//NOFORN 
RECORD 315 


b6 

b7C 


bl 



Assistant Qeneral Counsel 
National Security Law Branch 
Office of General C ounsei FBI 


Voice 
Pager 
Secure Fax 
Fax 


b2 

b6 

b7C 


13 


T 







other than that, you have the concerns as discussed. 
Thanks, 


ss/{ 


Secure Technologies Exploitation 
Cryptologic and Electronic Analysis Unit 
Operational Technology Division 
Enninaorinn Rasearch Facility 
<roice 


ISTU III 

’ax (non-secure) 
ifax (secure) 


Original Mes sage — 

From: l„ ^ (OGC) (FBI) 

Sent: Tuesday. Mav 23 2006 3:53 PM 

To; t lnra-^ffRn 

Cc: [ J[OTD) (FBI); 


Subject: FW: PH matter 06-582 - New Concern 

Importance: High 


SECRET//NOFORN 
RECORD 315 










s 


J 


Science and Technology Law Unit 
Office of the General Counsel 
Fed eral Bureau of In vestigation 

ph { r 7 

Ph -1 

Fax - I 



— Original Messa 

From; 

Sent: 

To: 


i 


le— 


Kcro) (FBI) 

Mgndav. Mav 15. 2pQ6 10:45 am 
OTP) (FBi)£ 


Cc: 

Subject: 


piakMbNib 
RE: PH matter 06-582 




) (FBI) 

NTHONY P. (OTD) (FBI) 


SECRET//NOFORN 
RECORD 315 


b2 

b6 

b7C 


JOTD) (FBI) 


](OGC)(FBI); 


However, any rewording may or may not be accepted by the FISC as OGC has advised. 

Or the presentation of acceptable rewording would take months such as our experience with PG'.s 
case that is still unresolved. 


i 


ss- 

FBIFOCTDTDTT 
ITOS 1/CONUS 1 
Rm4W15B 
Desk 


Pgr 

Internal Secure 


h6 

hlc 

h2 


— Original Mess age — 

From: \ | (OTD) (FBI) 

Sent: ^ Monday, May IS, 2 006 10:39 AM , 

To; l_. _ -.. i (CTD) (FBI ) j ~ ~ t OTP) (FBI); I t OGQ(FBI): 

I I Sfec) (FBI) 

Cc: DltLEMEI^TB, ANTHONY P. (OTD) (FBI) 

Subject; RE: PH matter 06-582 

SECRET//NOFORN 
RECORD 315 


(S) 


ssa I 

Assistant Section Chief 

Digital Eviden^ Section, Operational Technology Division 
\/oice 
Fax 

Cell 


— Original Message — 

E 


From: 

Sent: 

To: 

Subject: 


c 






(FBI)£ 


“J(CrD) (FBI) 
Tiooe 10:37 AM 
^7D) (FBI) 


i (ocq (fbT) 


ii)f 

(FBI 


JOTD) (FBI){ 


JOGC) 


FW: PH matter 06-582 


15 






Importance: High 

SECRET//NOFORN 
RECORD 31S 






bl 


ssa I 

FBIHQ/CTD/LX1 
ITOS 1 /CONUS 1 
Rm 4W158 
Desk 
Pgr 

Internal Secure 


!5S|1 


— Original Messjaa 
From: 

Sent: 

To; 

Cc: 

Subject: 


}0GC){FBI) 


Friday. Mav^l2. 2006 5:09 PM 
I -Logo (FBI) 

JCTD) (FBI) 


RE: PH matter 06-582 


b6 

b7C 

b2 


SECRET//NOFORN 
RECORD 315 


The problem is as I understand it we do not have an i dentifier to put In the court order. 

Therefore, we would be asking the court to authorize I I 

I b7E 


Assistant General Counsel 
National Security Law Branch 
ounsel FBI 

Voice 
Pager 

Secure Fax b6 

Fax b7c 

b2 



— Original Mess age — 

From: \ ~l OGa (FBI) 

Sent: Friday. Mav 12. 20 06 4:29 PM 

To: I f OGCVFBn 

Subject: FW: PH matter 06-582 

Importance; High 

SECRETf/NOFORN 
RECORD 315 


bl 




^Assistant General Counsel 
Science and Technology Law Unit 
Office of the Genera! Counsel 
Federal Bureau of Investigation 


16 


SE 


T 









i! 


— Original Messa ge — 
From! 

Sent: 

To: 

Subject: 


[ 


(OTD) (FBI) 


Friday. May 12. 2006 3:Q3 PM 

DTD) (FBI); 

PH matter 06-582 ^ 


:OGC) (FBI) 


SECRET//NOFORN 
RECORD 31 S 


b2 

be 

b7C 



— Original Mes sage — 

From: j toTD) (FBI) 

Sent: hnaav. MayJLi^ ^udb PM ! 

To: I K OGC) (FBI); I t OTD) (FBI) 

Subject: RE: PH matter 06-582 


be 

b7C 


SECRET//NOFORN 
RECORD 315 




— Original Mpgynp — 

From; | l (OGC) (FBI) 

Sent: " FridayTMav iT 2006 2M PM , , 

To: I t OTD^ (FBI); \ l[OTO) (FBI) 

Subject; FW: PH matter 06-532 


SECRETI/NOFORN 
RECORD 315 


For your information. 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fed 

Ph 

Ph (Secure! \ 


ijrai Riirpt^ii nf Investigation 


Fax 


b2 

b6 

b7C 
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s 






SEDfCT 


Original Mess age 

Froms 
Sent: 

To: I 


[ 


JOGC)(FBI) 


Subject: 


■Eririav. Mav_17. 7nnfi 1:52 PM 

, frrpvfFBTvl 

(DGC) (FBI); t 
(FBI) 

PH matter 06-582 


b6 

.b7C 


J(OGC) (FBljj 


rPRnf 


JcGCT 


SECRET//NOFORN 
RECORD 315 



I I 

Assistant General Counsel 
National Security Law Branch 
ounsel FBI 

Voice 
Pager 
Secure Fax 
Fax 



h2 

b6 

b7C 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreign 
Counterintelligence Investigations 
DECLASSIFY ON; 20310512 
SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign 
Counterintelligence Investigations 


SESgET 


18 



r 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON; 20310512 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


DERIVED FROM; G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


(OTP) (FBI) 


From; 

Sent: 

To: 

Cc: 

Subject: 


](OTD)(FBI) 


[ 


Wednesday, May 2 4. 2006 12: 59 PM 

nOGC)(FBI);| 
rrm ^ 

3oTD) (FBI)( 
r5B2 - New Cor 


](OTD) (FBI)t 


RITD) 


b6 

b7C 


Rt: pH matter oe 


(OGC) (FBI) 


Concern 


SECRET//NOFORN 
RECORD 31 S 




TritorfTiatiori Technology Specialist 
O perational Techno logy Division 

o4 

M 


be 

fo7C 


Original Message 

From: [ 

Sent: 

To: 

Cc: 


jOGCXFBI) 

WpdnP^Av. MAa4. 2006 10:55 m 

|(OTD) (FBn:r 


]OTD) (FBI){ 




rro) (Fsi){ 
GC) (FBI) 


]OTD)(FBI) 


20 






Subject: RE: PH matter 06-582 - New Concern 


s 


T 


SECRET//NOFORN 
RECORD 315 


bl 


Assistant General Counsel 



National Security Law Branch 
Counsel FBI 
Voice 
Pager 
Secure Fax 
Fax 


Office of General 


b6 

b7C 

b2 


— Qn ginai Message' 

From; | *" 

Sent* I 
To: 


k OTD) (FBI) 
av 24. ^QQ 6 8:49 AM 


Cc: 

Subject: TO; PM matter oa 


m (FBI)1 

3o td)TO 


82 • New Qjncem 


10TD)(FBI);[ 
JOGC) (FBI) 


](OGC){F8I) 


b6 

b7C 


SECRET//NOFORN 
RECORD 315 


bl 




— Original Message — 

From: I k OGC)(FBI) 

Sent; Tuesday, May 23, 2006 5:42 PM 

To: ,r — LJ(0TI>) (FBI); | [OGC) (FBI) 

Cc: I I Totd^ (FBI) 

Subject: RE: PH matter 06-582 - New Concern 

SECRET//NOFORN 

RECORD 31 S bl 


(S) 


Assistant General Counsel 

Law Branch b2 

Counsel FBI 

Voice 1,7c 

Pager 
Secure Fax 
Fax 


National Secunty 
Office of General 









— Originat Me 
From; 

Ser^ 

To:\ 

Cc: 


ssjfla 


Tuesday, Ma^ 
1q6C) {FBOL 


«KIII 


Subject: 




l(OTD) (FBI) 

£.107 

t OGOCFB!) 


|(OTD) (FBI) 

re: PH matter 06-582 - New Concmi 


he 

hlC 


SECRET//NOFQRN 
RECORD 315 


(SI 

Thanks, 


SSfi\ 

Secure lecnnofogies Exploitation 
Cryptologic and Electronic Analysis Unit 
Operational Technology Division 
iFnninpprinn Research Facility 
|/oiC0 
BTUII! 

ax (non-secure) 
ax (secure) 


b2 

fo6 

b7C 




— Original Messa ge^— 

From: 

Sent: 

To: 

Cc* 

Subject: i-w: kh matter 

Importance: High 


l(OGC) (FBI) 

3. 2006 3:53 PM 
JO^XFBO 

OTO) (FBI); 


r. 


New Concern 


](OTD) (FBI) 


b6 

b7C 



SECRET//NOFORN 

RECORD 315 b6 

b7C 


Thanks 


MSbibidiiHotineral Counsel 


22 






Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau of tpyestigation 

PH r 
Ph (Secure) -I 
Fax - | 



b2 

he 

hlC 


— Original Mes sage- — 

From: 

Sent: 

To: 


Cc: 

Subject: 


kCTD) (FBI) 
Monday. May IS. ^0 06 10:45 

OTD) (FBI)L 


200 

=BI) 


lOGC) (F! 

CICLEPIBJTE, ANTHONY P. (OTD) (FBI) 


](OTD) (FBI); [ 


lOGO(FBI); □ 


RE: PH matter 06-582 


b6 

:b7C 


SECRET/ZMOFORN 
RECORD 315 


However, any rewording may or may not be accepted by the FISC as OGC has advised. 

Or the presentation of acceptable rewording would take months such as our experience with PG's case 
that is stilt unresolved. 


ssaI 

FBIHQ/CTD/LX1 

ITOS 1/CONUS 1 

Rm4W158 

Desk 

Pgr 

Internal Secure 


h2 

b6 

:b7C 


— Original Messaoess:^ 
From: I 

Sent; . 

To: I 




Cc; 

Subject: 




(OTD) (FBI) 
006 10:39 Aii. 
(CTO) (FBI)r 
C) (FBI) 


JOTO) (FBI)[ 


_ :b6 

JOGCKFBI); b7C 


DICLEMENTE, ANTHONY P. (OTD) (FBI) 
RE: PH matter 06-582 


SECRET//NOFORN 
RECORD 315 



bl 


ssa I I 

Assistant Section Chief 

Digital Evidenc e Section, Operational Technology Division 
)/oice 
Fax 
Cell 


b6 

b7C 


— Original Messag 
From: 

Sent: 

To: I 




3 


Subject; 

Xmportance: 


TW: PH matter 
High 




CTD) (FBI) 
006 10:37 A 
(OTD) (FBI) 
) (FBI) 


r 


6-582 




(OTD) (FBI); 


](OGC)(FBI); 
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ET 








3 


T 


SECRET//NOFORN 
RECORD 315 


(S) 


bl 


SSA l 

FBIHQ/CTD/LX1 
ITOS 1 /CONUS 1 
Rm 4W158 
Desk 
Pgr 

Internal Secure 


— Original Mess 

From: 

Sent: 

To: 

Cc: 

Subject: 


t 




OGQ(FBI) 
Friday. Mav 12. 2 006 5:09 PM 
|JGC) (FBI) 

I. (CTD) (FBI) 
RE: PH matter Dil-582 


SECRET//NOFORN 
RECORD 315 


b2 

b6 

b7C 


(S) 


I 

1 



Assistant General Counsel 
National Security Law Branch 
Office of General Counsel FBI 


b2 



Voice 

b6 



Pager 
Secure Fax 

b7C 



Fax 



bl 


— Original Mess age — 

From: I ~l (OGa (FBI) 

Sent! Friday. May 12. 20 06 4:29 PM 

To: I PGQ(FBI) 

Subject: fw; ph matter Ub-S82 

Importance: High 


SECRET//NOFORN 
RECORD 315 




Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fe deral Bureau of In vestigation 

PH I 


b6 

bVC 

b2 



24 





Ph ( Secure) -I 
Fax 4 I 



[ 


— Original Mess age — 

From; 

Sent: 

To: 

Subject: 


](OTD) (FBI) 


Friday, May 12, 2006 3:0 3 PM 

kOTD) (FBnl 
R E: PH matter Ub-bHi ^ '■ 


](OGC) (FBI) 


b2 

b6 

:b7C 


SECRET//NOFORN 
RECORD 315 



Original Mess age — 

I l lOTP^ (FBI) 

Friday. Mav 12 2006 3:02 PM 

I fOGC) (FBI);| l(OTD) (FBI) 

RE: PH matter 06-582 ' 

SECRET//NOFORN 
RECORD 315 


From: 

Sent: 

To: 

Subject: 


he 

blC 


bl 




— Original Message—— 

From: | |(OGC) (FBI) 

Sent: "Friday. Mav 13 . 2006 2:4 ' ' 


To: 

Subject; 


[ 


TW; PH matter 66-585 


PM 

OTD) (FBI); 


](OTI>) (FBI) 


SECRET//NOFORN 
RECORD 315 


For your information. 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fed eral Bureau of In vestigation 

Ph-I__^ 

Ph (Secure) I I 

Fax ] I 


b6 

b7C 

b2 


— Original Message- 

From: 




]06Q(FBI) 









DERIVED FROM; G-3 FBI Classification Guide G-3. dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 2031QS12 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310S12 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


(QTDKFBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


c 

[ 

[ 




(fM 


lOGC) (FBI) 
av 24. 20 06 9:36 AM 
. . l(,OTD) (FBI);, 
](OGC)(F^ 


](ITD) (FBI); [ 


(OTD) 


IOT){FBI);[ 


RE; PH matter 06*582 - New Concern 


](0GC) (FBI) 


:b6 

b7C 


SECRET//NOFORN 
RECORD 315 


(S) 



Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau of Investiqation 

ph-i — , i 

Ph ( Secure) I | 

Fax-|Z__D 


h2 

b6 

;b7C 


bl 


— Origrnaf Message — 


From: 

Sent: 

To: 

Cc: 

Subject: 



OTD) (FBI) he 


Wednesday. May 24, 2006 8:49 AM 
(FBn:l 

^OTD)(FBI)I 

|OGC)(FBI) 

■b7C 

] KOTD) (FBI);I 

hw: PM matter ub-taz • New Concern 

ICOGC) (FBI^ 




SECRET//NOFORN 
RECORD 315 



35 




DECLASSIFY ON: 20310512 
SECRET//NOFORN 


J 


DERIVED FROM: G>3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 




From: 

Sent: 

To: 

Cc: 

Subject: 


I l lOTPI (FBI) 

Friday Mav 17 ?0QR 8:16 AM 
I IffTD^ ( FBh 

k OTDKFBI) 

RW; l-tii Philadef^ia request for CIPAV 


Importance: High 


SECRET//ORCQN.NQFQRM 
RECORD 268-HQ-1305912-SDG 


I am sure that you guys are in the loop on this, but I wanted to forward this to you. 



b7C 


— Original Messa 

From: 

Sent: 

To: 

Cc: 

Subject: 
Importance: 




le — 


iOTD) (FBI) 


I, 


Ttiursdav. May 11. 2006 7:11 PM 

□jCTD) (F8I);r 
jOTD) (FBI)f 


FBI Philadelphia request for CIPOT” 
High 


SECRET//ORCON.NOFORN 
RECORD 268-HQ-1 30591 2-SDG 


Z3pH) (FBI) ^ 

JOGC) (FBI): ! I (OTO) (FBI) 


i 


(U) Gentlemen, I'm sorry it took me a few days to get spun up on all this, but I have a sufficient grasp now to lay out what 
OTD can do in the subject matter. Of course, we want to support this effort any way we can within lawful parameters. At 
the risk of regurgitating that which is already known, let me lay it out from the basics (and please correct me where I stray): 



hi 



I 


! ^ 






(U/LES) These are my thoughts on how we can get this job done. I'm sure I didn't get every detail right, so please don’t 
hesitate to challenge something I've said here. For C FAiJ's nart we need only ?4 -4S hours to prepare deployment. Also, 
I'll be out of the office next week. Please contact SSA I l in my absence. 



Digital Evidence Section. Operational Technology Division 
ERF Extension 
Q uantico. VA 

tel l k unsecure) 


he 

hlC 

hi 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20160511 

SECRET//ORCON.NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G^3, dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20160511 

SECRET//ORCON,NOFORN 



50 



I(OTD) <FBI) 


From: 

Sent: 

To: 

Cc; 

Subject: 


loGC) (FBI) 


^b6 
blC 


Tuesday. Jamiary Q3, 2 QQ6 3:17 PM 


3c 




(OTD) (FBI)£ 


](ITD) (FBI) 


Re CIPAV and Two Laptops 


SENSITIVE BUT UNCLASSIFIED 
NON-RECQRD 


•b2 

b7E 


As I don't have a copy of the EC request or the ID# of the case, I will put off writing my opinion for record until you return to 
the office and can provide them to me. 


Meanwhile, I recommend proceeding with| 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau of Investigation 
Phor^ 4 
Fax -I 


ALL niFOEHATIOH COMTAIHED 

HEREIH IS UHCLAS5IFIZD 

DATE 06-U-2008 BY 60322uclp/3tp/i:d3 


be 

b7C 

b2 


SENSITIVE BUT UNCLASSIFIED 



From: 

Sent: 

To: 

Cc: 

Subject: 


Friday. October 21 


(OTD) 

005 10:06 AM 
(OTD){CON)i 
OTD)(CON): 




FW: CIPAV request for El Paso 


~ | (OTD)(CON) 
JlTD) (FBI) 


b6 

b7C 



b2 

b7E 

b6 

b7C 


ssfiCZIZIIIIJ 

Cryptologic & Electronic Anolysis Unit 


51 













b6 

b7C 


^{OGC) (FBI) 

Wednesday ^ril 1 !^ 2005 8:58 AM 
(OGCilEBD 

— 3 tD):I 

RE: (S) Re Case # P 


ITD) (FBI) 


b7A 


Good news, thanks 


b7A 


DATE: 06-11-2008 

CLASSIFIED BY 6Q322uclp/stp/rds 

REAS05T: 1.4 (c) 

DECLASSIFY OTJ: 06-11-2033 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel . 
Federal Bureau of Inves tigation 
Phone -1 — -J 

Fax^ I 


O riginal Me<;<aQe — -- 

From 1 | ( OGC){ FBI) 

Se nt: Wednesday, A pril 13, 2005 8:57 AM 

To; r |( OGC) (FBI) 

Subject: RE: (S) Re Case # 1 


b6 

b7C 


b6 

b7C 


b7A 


SECRET 

RECORD 


ALL IHFOREATIOH CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
NHEPZ SHOW OTHERWISE 


b7A 


[ They have been buried so he just has not gotten to it. If he gives a very ruff draft I will finish it off for him. We 
are still a go. 


Original Message-- 

From i I fOGC) (FBI) 

Se nt: Wednesday, Ap ril 13, 2005 8:55 AM 

To :l r OGC(FK) 

C d __ r iTD) fFB Di 

Subject: RE; (S) Re Case #| 


:b6 

b7C 


;rrD) 


b7A 


SECRET 

RECORD 


That's too bad. I think we were on to a useful tool. 


a 
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Assistant (ieneral Counsel 
Science and Technology Law Unit 
Office of the General Counsel 


Federal Bureau of Inves tigation 
Pho ne j 
Fax - I 




he 

bic 


Orioinal Message- — 

From: 


|(OGC)(FBI) 


Se nt: Tuesday. Apri l 12. 2005 5:30 PM 


To: 

Subject: RE: (S) Re Case # 


(OGC) (FBI} 


he 

hlC 


SECRET 

record[ 


They have not given me a draft yet so I doubt it 


Or iginal Message-— 

From;! KOGC) (FBI) 


Sent: Tuesday. Anri! 12. 2005 4:55 PM 

ToJ IfOGCyFBn ^ 

Cc l l TrTD);| jlTD) (FBI) 

Subject: RE: (S) Re Case #| 


b7A 


b6 

b7C 


SECRET 

record[ 



Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau ot lnvep tiaation 
Phonj 
Fax 


eraij 




■b6 

hlC 


Original Message 










From:C 


lOGCXFBI) 


Toil 

IfOGCi fEBIb 

If CTD) fFBI) 

Cc:l 

(OGC) (FBI);| 


c 


](OGC) (FBI) 


KOGC) (FBI); 


Subject: RE; (S) Re Case # 


be 

hic 


SECRET 

RECORD 


Its drafting up a package as per my discussions with him . Since much of the information 
and investigation will involve classified materi als CTD will write up a package for the entire operation 
and circulate for a final vetting to Cyber, et al. { \ 


Or iginal Message-— 

Fromrf^ KOGC) (FBI) 

Sent: Tuesday, March 08, 2005 2:38 PM 
To i l(OGC¥FBn 

Cci l(OGC) (FBI); 


Subject: FW; (S) Re Case # 




b6 

b7C 


l(OGC) (FBI); 

b7A 


SECRET 

RECORPf 


This case is the one that we met on in McClean. Any thoughts? OGC needs to respond to ITD to 
keep this ball rolling. While STLU has some conflicting ideas about how to handle friis proposal, 
nothing will be resolved until you and NSLB provide your input. 

Thanks, 


] 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the Ge neral Counsel 


— Or iginal Message 

From; ! K OGC) (FBI) 

Se nt: Tuesday, March 01, 2005 4:18 PM 
To: 

Cc: 


Subject: (S) Re Case #[ 


, |(P 

l(QG C) (FBI); I 


>Ga (FBI) 


(ITD) (FBI) 


b6 

■b7C 


SECRET 








(S) 


Sorry for rambling, lots on my mind, but I wanted to tell you the rest of the story so that the EC 
might make more sense to you. Please let me know your thoughts. If we need to get together it 
is possible. 

:b6 

I b7C 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97, Foreign Counterintelligence 

Investiaattoris 

DECLASSIFY ON: 20300131 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON: 20300131 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON: 20300131 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON: 20300131 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON: 20300131 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreign Counterintelligence Investigations 
DECLASSIFY ON: 20300131 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20300131 

SECRET 
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DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97, Foreian Counterintelliaence Investiaations 



From: 

Sent: 

To: 

Cc: 

Subject: 


«:s) 


tech.gif (1 KB) 


UNCI 


IIFIED 


NON-RECORD 


J(ITD) 

a ry 02. 2005 9:12 AM 

HN) (FBI\ 

iC) (FBI); t 
HN) /FBI) 


(iTD) (FBI): 


DATE: 08-06-2008 

CLASSIFIED BY 60322uclp/stp/tds 

PEASON: 1.4 (c) 

DECLASSIFY OJT: 08-06-2033 


All INFORHATIOH COHTAIHED 
HEREIN IS UNCLASSIFIED EXCEPT 
I3HERZ SHOUW OTHERWISE 


CIPAV 


(Computer & Internet Protocol Address Verifier) 






UNCLASSIFIED 

NON-RECORD 


he 

hlC 


Thanks again for your ideas and willingness to help this morning. Below is a summary of the 
investigation to date. Any assistance/ponies you can fend in or effort to obtain and use an IPAV is 
most welcome. 


Case ID #: 288A-HN-18303 (Pending) 

ALt TNFOliSATTOM C0HTAIT5Et» 

HEREIN IS imClASSIFIED 

DATE 06-03-2Q08 BY 60322uclp/3tp/rd3 


Title:] |; 

1 - VICTIM: 

CITA- INTRUSION 
SUMMARY: 


;b6 

b7C 


b6 

b7C 
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1.2005 4:08 PM 
(EP) (FBh 


ITD) (FBI) 08-06-2008 

' ^ ^ ^ CLASSIFIED BY 60322ucip/stp/rds 

msoU; 1.4 (c} 

DECLASSIFY Off: 08-06-2033 



CIPAV 


ALL lUFOPffATIOSr COffTAINED 
HEREIII IS raCLASSIFlED EXCEPT 
TOERE SHOUff OTHERWISE 



(Computer & Internet Protocol Address Verifier) 


1 






Sorry, my mistake... 



send the attachment 





b6 

:b7C 








O-dO'7 Thhti 


’ — I b6 — ■ 

1 IT( V 

tV ■) aa/ * 



ALL IHFOEUIATIOH COMTAira 

HEREI« IS UMCLASSIFIED 

DATZ 06-03-2008 BY 60322uclp/stp/cds 




From: 

Sent: 

To: 

Subject: 


l(OTD> (FBI) 

I I ^OTD^ (CON) 

Thursday July 26 ?n^-48 PM 

l (gTD) (FBI) 

RE; Urgent FOIA Request - Deadline - Friday, August 3, 2007 


'be ' 
b7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Good questions, I will check... stand by 
L 


ALL IHFORMATIOH CONTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 06-03-2008 BY 60322ucip/sT:p/i:di3 


— Onginal Messao^ — 

From: I l rOTD> (FBI) 

sent; ■miir«1;^v. Iiilv 76. 2007 2:44 PM 

To: I _J(OTD) (CON) 

Subject: RE: Urgent FOIA Request • Deadline - Friday, August 3, 2007 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Does this apply to our contractors? Most do not have trilogy access,. 

b6 

On-Site? 

Off Site? 1^2 


J... 


I I 

Information Technology Specialist 

Opera tional Technology Division 

Office 

Mobile 

1 

b7C 


— -oriqinai Message—- 

From: ( K OTDl (CONI 

Sent: -n^.TcH=iw ii.i» 

To; 


Cc: 

Subject: Urgent FOIA Request * Deadline * Friday, August 3, 2007 

Importance: High 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Good Afternoon, 


1 





Per UC I I please provide hard copies of ALL documentation, to include e-mails, concerning CIPAV 

Technology. All information is to be turned in by COB Friday, August 3rd. 2007 . Additionally, it is requested that 
y ou please put all docu ments in chronological order. If I am not in the office that day, please take your documents 

to l I 

Thanks, 

CZZ] 


Management Assistant 
Operational Technology Division (OTD) 
Cryptologic an d Electronic Analysis Unit (CEAU) 
(Chantilly) 

(Quantico) 

(Cell) 


b6 

b7C 

b2 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


b6 

b7C 



From: 

Sent: 

To: 


Cc: 

Subject: 


I ~1 (OTD) (CON) 

Thursday .July 26 2007 2 06 PM 


Urgent FOfA Request - Deadline - Friday, August 3. 2007 


Importance: High 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Good Afternoon, 

Per UC t I please provide hard copies of ALL documentation, to include e-mails, concerning CIPAV Technology. 

All information is to be turned in by COB Friday, August 3rd. 2QQ7 . Additionally, it is requested that you please put all 


2 





documents in chronological order. If 1 am not in the office that day, please take your documents to 
Thanks, 


Management Assistant 
Operational Technology Division (OTD) 
nrvntninnin aryl Electronic Analysis Unit (CEAU) 
(Chantilly) 

(Quantico) 

(Cell) 


b6 

b7C 

b2 


SENSITIVE BUT UNCLASSIFIED 


From: 

Sent: 

To: 

Cc: 

Subject: 


ItOTPXFBI) 


(S) 


(OTD) (FBI) 

Monday. July 16. 2007 5:06 PM 



JOTD) (FBI) 
tOTD) (FBI) 


SENSITIVE BUT UNCCASSIFIED 

non-record' X" \ 



PATE: 08-06-2003 

CLASSIFIED BY 60322uclp/stp/i:d3 

PEA30H: 1.4 (c) 

DECLASSIFY OIL: 03-06-2033 


What are we going to do here? 


•Original Message — 


From: 

Sent; 

To: 

Cc: 


I 


](OTD) (FBI) 


Monday, July 16 . 2007 4:35 PM 
~,rOGC) (FBI) 

1 l(OTD) (FBI);[ 


Subject: RE: R 


SENSITIVE BUT U NC 
NON-RECORD 



j(OGC) (FBI); 


](OTD) (FBI); 


ALL IKFOPltATION CCIH’AIHED 
HEREIH IS OTCLASSIFIEP EXCEPT 
TJHEFE SHOTiJH OTHERUISE 


b6 

b7C 


OTD) 


bl 


! think we have a problem. 

J-. 


[ 


] 


Information Technology Specialist 
Operati onal Technoloov Division _ 
Office ■ 

Mobile 

Pager ■ 


b6 

b7C 

b2 



OrioioaLUassaoess; 




From 

Sent: 

To: 

Cc: 


Subject! RE: rJ 


](OGC) (FBI) 

4:33 PM 


lEBXl 


m? 4 :: 

JoTD) (FBIl 
JOTO) (FBI);L 


JOGC) (FBI);[ 


JOTD) (FBI); 


{OTD) 



bl 







SENSITIVE BUT UNCU^IFIED 

non-record' \ 



Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fe deral Bureau of Inv estigation 
Ph' 

Cell 

Ph (Rpriirft^l 


Fax'I 


1 


1 



bl 

b2 

b7E 


b6 

b7C 

b2 



— Original Mess age — 

From: | 

SenL 

To:l \SOGC) (F8I) 

Cc: | 

Subject; 


3(0TD) (FBI) 


/Monday, July 16, 2007 4:30 PM 



i 


SENSITIVE BUT UNC 




](OGC) (FBI) 


IFIED 


NON-RECORD 


be 

b7C 

bl 



bl 


Information Technology Specialist 
Operat ional Technology Division 
Office - 

Mobile 

Pager ■ 


be 

b7C 

h2 


— Original Mess age — 

From: I 

Sent: Monday, July 16, 20 07 3:52 PM 

To: 


JOGQ (FBI) 


1(OTD) (FBI); 


(S) 

j 

L- rnn)) (fri) 


^ ■ ■ 


SENSITIVE BUT UNCt^SSlFIED 


NON-RECORD \ 


IfOTD) < 


foGQ (FBI)[ 


OGC) (FBI); 


bl 




bl 








Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fed eral Bureau of In vestigation 
Ph -I ■ 

Cell! 

Ph ( Spr.nrp> J 

Fax] 


he 

hlC 

h2 


SENSITIVE BUT UNCCASSIFJED 




SENSITIVE BUT UNCLASSIFIED 






SENSITIVE BUT UNCbASSIFIED 


SENSITIVE BUT UNCbA^IFIED 



From: 

Sent: 

To; 

Cc: 

Subject; 


(S) 


[ 


(OGC) (FBI) 


Monday. July 16. 2007 4:33 PM 

lOJD) (F^ 




TTnfm tFRivT 


[OTD) (FBI) 


]{OGC) (FBI)C 

:bi 


SENSITIVE BUT UNbLAS^FIED 
NON-RECORD 


(S) 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 


he 

hic 
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bl 



[ 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau of Investigation 
Ph 
Cel l 

Ph (Secure) | 

Fax I 


I 



b6 

b7C 

b2 



SENSITIVE BUT UNC 

SENSITIVE BUT UNCUtS^IED 



SIFIED 

— 


SENSITIVE BUT UNCLA 






(OTP) (FBI) 


From: 

Sent: 

To: 

Subject: 


](SE)(FBI) 


Tuesday. June 12. 20 07 3:20 PM 

I (OTP) (FBI) 


RE: Associated Press Article 


UNCLASSIFIED 

NON-RECORD 


b6 

b7C 


Looks great. Thanks I | 

Original Message — 

From: I I fOTn^ (FBI) 

Sent; TuRSdav. Jun« 1?. 7007 12:03 PM 

To: I I fSE) (FBI) 

Cc: I I OTP) (FBI) 

Subject: RE: Associated Press Article 

UNCLASSIFIED 

NON-RECORD 


b2 

b7E 


[ 


Information Technofog^y 
Operational Techl 



eciatist 

lesion 


b6 

b7C 


7 







Office 
Mobile 
Pager ■ 


— Or iginal Message- — 

From: 1 (FBI) 

Sent: Tuesday. June 12 2007 2:34 Pij 

To: J rOTO) (F BI): I kO TO (CQN): I l (OTO) (FBI) 

cc: I . Use) (fbi) I I ise) (oga) 

Subject: FW: Associated Press Article 

UNCLASSIFIED 

NON-RECORD 


b6 

b7C 


J Thanks, [ 


sa[ 


FBI Seattle 



(Fax) 

(Ne)del)l 


he 

bic 


h2 

b7S 

b6 

b7C 


— Original Message — 

From! I l (SE) (FBI) 

Sent: Tuesday, June 12, 2007 1 1 : 18 AM 

To: I. I (SE) (FBI) 

Subject: Associated Press Article 

UNCLASSIFIED 

NON-RECORD 


Here is the email link in the style of the Seattle Times 

> 

> 

> Bomb threat at high school downplayed by local police department 

> 

> Technology savvy student holds Timberline High School hostage,... 

> 

> Full story: 

http://seattletimes.nwsQurce.com/html/nationworld/2003743231 webteensex 1 1 .html 

> 

> 

> = === ■ -=== =..■- 111 ==== 

> 

> TO SUBSCRIBE TO THE SEATTLE TIMES PRINT EDITION 

> Call (206) 464-2121 or 1-800-542-0820, or go to 

> http://seattletimcs.com/subscrifae 

> 

> HOW TO ADVERTISE WITH THE SEATTLE TIMES COMPANY ONLINE 

> For information on advertising in this e-mail newsletter, 

> or other online marketing platforms with The Seattle Times Company, 

> call (206) e-mail websales@seattletimes.com 

8 




> TO ADVERTISE IN THE SEATTLE TIMES PRINT EDITION 

> Please go to http :/ / seattletimes .nwsource.coin/ contactus/adsales 

> for information. 

> 

> — — ■■ 

> For news updates throughout the day, visit http://www.seattletimes.com 

^ = =■:- 

> 

> Copyright (c) 2007 The Seattle Times Company 

> 

> www.seattletimes.com 


Here is the full article. 
Friday, June 8, 2007 


Bomb threat at high scho© 
locai police department 

The Associated Press 



LACEY Wash. — Technology savvy student holds Timberline High School hostage. The suspect is still 
unknown after several bomb threats and 5 days of school evacuations. Anonymous bomb threats to 
high schools are a growing trend in rural America. 


Timberline High School is the latest victim in an increasing trend of computer related extortion schemes. 
These schemes all involve a similar pattern: several threats made over a week by students utilizing 
technology. These threats receive low media attention. School officials and law enforcement 
downplay the risk associated with the threats and disregard pleas from concerned parents and students. 


Althougjh similar incidents have occurred in Kentucky, Michigan, and Virginia, the Timberline threat shows an 
escalation in sophistication and computer hacking skills. 

[Statistics to come on each threat. Including: duration of threat, cost estimate for damage, and psychological 
factors] 

The most significant difference with the Timberline threat is the use of My Space and obfuscated emails. 
According to sources at Timberline High School, the subject uses other students’ emails to send the bomb threats, 
most often going by the name of "Doug." Additionally, the suspect has set up a My Space page to taunt 
students. According to "Doug". # students have joined the My Space page. A frenzy of students are 
trying to identify "Doug", yet none have succeeded. 


In response to the students’ race to identify the suspect, "Doug" comments 


[Place comment here] 


School officials have given parents and students little assurance of the threats ending soon. Timberline 
Principal Dave Lehnis stated, "While the administration and law enforcement believe the school is safe and 
secure, we understand if parents want to keep their students at home and we will work with them to get the 
homework they need." 

The emotional toll on the students can be seen by ttie significant absentee numbers. If school officials and 
law enforcement are not taking this threat seriously, the parents are. 



UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


From: 

Sent: 

To: 

Subject: 


l(OTD) (FBI) 


C 


iim;. 


loTD) (FBI) 
av. June 12. 200 7 2; 37 PM 


r (FBI) 

FW: Associated Press Article 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


fyiQ 

I I sent a new article for the Seattle case. 


SSA i I 

Operational Technology Division 
Digital Evidence Section 
Cryptologic and Electronic Analysis Unit 
Software Develo pment Group 
[(desk) 

(cell) 

(fax-unclass) 


— Origrnal Mess age 

From: I ~~ j fSEUFBn 

Sent: Tuesday, June 12, 2007 2:34 PM 

To: I ■ fe OTD) {F8 1):l 1(0 10) (CON); I i (OTD^ (FBI) b 7 C 

Cc: I U SE) (FBn;l KSE) (OGM 

Subject FW: Associated Press Article 

UNCLASSIFIED 

NON-RECORD 


] Thanks^ 



SA 

1 

_FBi 

Seattle 



(Fax) ^ ^ 

(Nextel) DC.I 1 

1 n 


b2 

b7E 

b6 

fo7C 



J 
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— Original Mess 

From; 

Sent: 

To: 

Subject: 


T 


iSE) {FBI) 


Tup«yiav liinpl? ?nf)7 H;18 AM 

l (SE) (FBI) 

Associate F>ress Arbcle 


UNCLASSIFIED 

NON-RECORD 


b6 

b7C 


Here is the email link in the style of the Seattle Times 

> 

> 

> Bomb threat at high school downplayed by local police department 

> 

> Technology savvy student holds Timberline High School hostage,... 

> 

> Full story; 

http://seattletimes.nwsource.com/html/nationworld/20Q374323 1 webteensex 1 1 .html 

> 

> 

> — _ == — = 

> 

> TO SUBSCRIBE TO THE SEATTLE TIMES PRINT EDITION 

> Call (206) 464-2121 or 1-800-542-0820, or go to 

> http://seattletimes.coni/subscribe 

> 

> HOW TO ADVERTISE WITH THE SEATTLE TIMES COMPANY ONLINE 

> For information on advertising in this e-mail newsletter, 

> or other online marketing platforms with The Seattle Times Company, 

> call (206) 464-2361 or e-mail websales@seattletimes.com 

> 

> TO ADVERTISE IN THE SEATTLE TIMES PRINT EDITION 

> Please go to http://seattletimes.nwsource.com/contactus/adsales 

> for information. 

> 

> L -■ ■■ = ===in ^ - ===: ; = = 

> For news updates throughout the day, visit http://www.seattletimes.com 

> ===:;= - - == = ■zi,===:^--= n= 

> 

> Copyright (c) 2007 The Seattle Times Company 

> 

> VAvw.seattletimes.com 


Here is the full article. 


Friday, June 8, 2007 



UNCLASSIFIED 



From: 

Sent: 

To: 

Cc: 

Subject: 


UNCLjfeSIFIED 

NON-RECORD 


[OTD) (FBI) 
07 7:04 PM 


RE: 288A-SE-93709 


JSE) (FBI) 
(OTD) (FBI) 


be 

DATE: 08-Q6-2008 

CLASSIFIED BY 60322ucip/stp/r ds 

REASON: 1.4 (c) 

DECLASSIFY ON: 08-06-2033 



Please contact me at the below listed numbers if you have any questions. 


Sincerely. 



Operational Technology Division 
Digital Evidence Section 


ALL INFORHATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 
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s 





Cryptologic and Electronic Analysis Unit 
Software Develo pment Group 
|(desk) 

(cell) 

(fax-unclass) 













If you need more time to download the information we would be happy to accommodate you. Please contact me 
regarding the disposition of the data and the computers. 


v/r 




ALL IMfFORHATXOH COHTAIMED 
HEPEIH IS roCLASSIFIED EXCEPT 
INHERE SHOWN OTHERWISE 
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(QTP) (FBI) 


From: 

Sent: 

To: 

Subject: 



Request Managment System 

^ Monday. A pril 30, 2007 6:01 

RMS Request 0000000001 17037 aged of at least 60 days. 


■h6 ■ 
b7C 
b2 


RMS Request 000000000117037 aged of at least 60 days 


Division (Required) 
Program ( Required) 
Unit (Required) 

Item (Required) 
fUassibication 


mu 


(S) 


DATE: 08-06-2008 

CLASSIFIED BY 60322ucip/stp/rds 

REASON: 1.4 (c) 

DECLASSIFY ON: 08-06-2033 

bl 


TTE 

2000104 

536870924 






From: 

Sent: 

To: 

Subject: 


llOTP) (FBI) 


Request Managment Systerd 
Monday, April 30, 2007 6:01 /w 

] 


RMS Request 000000000116159 aged of at least 60 days. 


RMS 


Request 000000000116159 aged of at least 60 days 


Division (Required) . 
Program (Required) | 
Unit (Required) 

Item (Required) 

m aco 1 f-i 1 /-.n 



TT7 

2000104 

536870924 


ALL INFORHATION CONTAINED 
HERE IK IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 
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From: 

Sent: 

To: 

Subject: 


Request Managment Systern 
Monday. April 23, 2007 5:30 


'be ’ 
b7C 
b2 


RMS Request 0000000001 17037 aged of at least 60 days. 


RMS Request 000000000117037 aged of at least 60 days. 

Division {Required) 

Program (Required) 

Unit (Required) 

Item (Required) 

Classif-vcatinn 


TXZ 

2000104 

536870924 


DATE: 08-06-2003 

CLASSIFIED BY 60322uclp/stp/rds 

REASON: 1.4 (c) 

DECLASSIFY OU: 03-06-2033 



From: 

Sent: 

To: 

Subject: 



Request Managment Systemf 
Monday, A pril 23, 2007 5:29 A 


M 


] 


RMS Request 000000000116159 aged of at least 60 days. 


,b6 , 
b7C 
b2 


RMS Request 000000000116159 aged of at least 60 days. 


ALL IHFORKATIOK COKTAIKED 
HEREIN IS UNCLASSIFIED EXCEPT 


urvision (Kequirea; i 
Program (Required) [ 

_LLLU 


3iS) 

bl 

Unit (Required) ; 

Item (Required) : 





Classif ication : 

Secret 





112 

1014; 




2000104 

536870924 




he 

hlC 


(S) 







SECftEJ 


lOTD) (FBI) 



DATE: 08-06-2006 

CLASSIFIED BY 60322ucip/3tp/rds 

PEASOH: 1.4 (c) 

DECLASSIFY OJT: 03-06-2033 


From: 

Sent: 

To: 

Subject: 


Request Managment System ! 

^ Monday. A pril 09. 2007 6:09 AM 

RMS Request 000000000117037 aged of at least 60 days. 


b6 
■b7C 
b2 


RMS Request 000000000117037 aged of at least 60 days. 


Division (Required) 
Program (Required) 
Unit (Required) 

Item (Required) 
Classificati 


urn 



TT2 

2000104 

536870924 


From: 

Sent: 

To: 

Subject: 




Request Managment System [ 
Monday. April 09, 2007 6:09 A 


W 


ALL IHFOPMATION COHTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOOT OTHERWISE 


Request 0000000001161 59 aged of at least 60 days. 


b6 

b7C 

b2 


RMS Request 000000000116159 aged of at least 60 days. 


-bl 


Division (Required) 
Program (Required) ^ 
Unit (Required) 

Item (Required) 
Classification 


i 




(SI 


3(S) 



2000104 

536870924 


b6 

b7C 
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DATE: 08-06-2003 

CLASSIFIED BY 60322uclp/stp/i;d3 

REASON: 1.4 (c) 

DECLASSIFY ON: 08-06-2033 



Thanks, 



ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 



I just wanted to document the steps we have taken in the last few days. 





Information Technology Specialist 

Operational Tpchnnlonv niwisinn 

Office- 

Mobile 

Pager - 




« File: Transfer Receiptdoc » 



SENSITIVE BUT UNctASSf^ED 








From: 

Sent: 

To: 

Cc; 

Subject: 


lOTD) (FBI) 



](OTD) {CON) 


(S) 


Tuesday, March 20. 2 007 2:18 PM 

n(OTD)(FBI) p 
toinucoN)! 


RE 


SENSITIVE BUT UNCbAS^I ED 
NON-RECORD 


l0TD)(C0N) 


=b6 = 
b7C 


bl 


DATE: 03“06-200a 

CLASSIFIED BY 60322ucip/stp/rd3 

REASON; 1,4 (c| 

DECLASSIFY ON: 00-06-2033 


I have an undass floppy for you with this file on it ready for pickup. 




Original Message — 


^OTD)(FBI) 

Monday. March 19 2007 8:51 AM 
I I (OTD)(CON 

l//vrr>\/r'riMj 


From; 

Sent: 

To; 

Cc: 

Subject: 

SENSITIVE BUT UNbrA^I FIED 
NON-RECORD 






JOTD) (CON) 


r \ could you do a trusted download please? 

Thanks 

J... 


informaKon lecnnology Specialist 
Opera tional Technology Division 
Office 
Mobilel 
Pager 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOW OTHERWISE 


b6 

b7C 

b2 


Original 

From; 

Sent; 

To; 

Subject; 


i 


~V tP) (FBI) 

MnnHav March iq ;?007 8:47 AM 

I 


SENSITIVE BUT UN 


NON-RECORD 


Tampa Cyber 


kOID)(FBI) 


(S) 



IFIED 




Thanks again for your assistance! 


bl 


« File; Transfer Receipt.doc » 


23 







SENSITIVE BUT UN^ rSIFIED 




SENSITIVE BUT UNCt>iSS(FiED bl 

non-record' \ 


I Thanks again for your assistance! 

r~ • 

Tampa Cyber 



Transfer 

Receipt.doc (36 K8) 




SENSITIVE BUT Ulfeu^FIED 
NON-RECORD ^ 


Gentlemen, 

Here is the EC regarding the Tampa case. Let me know your thoughts. 

I 

Operational Technology Division 
Digital Evidence Section 
Cryptologic and Electronic Analysis Unit 
Software Develo pment Group 
Kdesk) 

[cell) 

If fax-unclass) 


be 

b7C 

b2 


24 





'Original Message 


From: 

Sent: 

To: 

Cc: 

Subject: 


i 


](T?) (FBI) 


Thi.rcriav Marrh na 2007 3:22 PM 

__LqTO) (FBI) , 

J(TP) (FBI)1_ 


aPAV Request 


]CTP) (FBI); 


JtP) (FBI); 


SENSITIVE BUT UNC 


NON-RECORD 



lED 


]CTP)(FBI) 

be 

b7C 



Thanks, 


Tampa Cyber 



cipav.request.wpd 
(28 K8) 


SENSITIVE BUT UNC IIFIED 


SENSITIVE BUT UNCLASSIFIE D 



From; 

Sent: 

To: 

Subject: 


l (OTP)(FBI) 

Friday. March 02, 2007 10:54 AM 

I I (OTD) (FBI) b 6 

FW; RMS Request 000000000115736 aged of at least 60 days. b7c 


UNCLApi^FIED 

NON’^cbRD 


t can you please clear this from RMS? 

Thanks ■>='2 

J.. 

b7C 

I 

Information Technology Specialist 
Operati onal Technology Division 
Office ■ 

Mobile ■ 

Pager - 1 


Original Message 

From: Request Managment System [mailto:[ 
Sent: Friday, March 02, 2007 10:39 AM 







Subject: RMS Request 000000000115736 aged of at least 60 days. 


-b6 

RMS Request 000000000115736 aged of at least 60 days. b7C 


Division (Required) : 
Program (Required) i 
□nit (Required) : 
Item (Required) : 

agoT -F ■i • 

OTD 

ISi 1^1 


( (S) 

(S) 



112 : 

2000104 : 

536070924 : 

1014:3730; 



I 


From: 

Sent: 

To: 

Subject: 




[ 


I 


I fQTD^fFBn 
Friday. March 02, 2 007 10:54 AM 

lOTD) (FBI) 


FW: RMS Request 000000000116159 aged of at least 60 days. 


b6 

b7C 



[ 


can you please clear this from RMS? 


Thanks 

J. . 


Information Technology Specialist 
Operatio nal Technology Division 
Office -I 
Mobile -I 
Pager - 


b2 

b6 

b7C 


-Original Message ^ 

From: Request Managment System [maiito| | 

Sen t: Friday/ March 02, 2007 10:39 AM 

To: l 

Subject: RMS Request 000000000116159 aged of at least 60 days. 


RMS Request 000000000116159 aged of at least 60 days. 




Division (Required) htD. 

Program (Required) 

Uni t ( Requ i red ) ~ 

item" (Require'dl ~\ 

Classification : Secret 


](S) 


bl 


( s j 


26 








Subject: RMS Request 000000000115736 aged of at least 60 days. 


RMS Request 000000000115736 aged of at least 60 days. 



RMS Request 000000000116159 aged of at least 60 days. 

hi 



27 


T 











From: 

Sent: 

To: 

Cc; 

Subject; 


l(OTD) (FBI) 

Wednesday Febru ary 21, 2007 10:30 AM 

______kQJD) (FBI) 

If OTDKFBh 
RMS CIPAV requests 


b6 

b7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I'm sure you're already aware of alt these requests, but FYl... 



RMS Request RMS Request RMS Request RMS Request RMS Request RMS Request RMS Request 
10000000116686 aglOOOOOOOl 16159 a^0000000115736 a^OOOOOOO 114249 agiOOOOOOO 114307 aglOOOOOOO 106885 ag^OOOOOOOl 16686 ag 



RMS Request RMS Request RMS Request 
)0000000116159 ag»0000000 115736 agl0000000114307 ag 



RMS Request RMS Request 
10000000114249 agt0000000106885 ag 


ALL IHFORHATIOH COHTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 06-05-2008 BY 60322uclp/3tp/r(is 


■b6 

b7C 


SENSITIVE BUT UNCLASSIFIED 



From: 

Sent: 

To: 

Subject: 


Request Managment System[ 


Tuesday. February 20, 2007 1 1:20 AM 


RMS Request 000000000116159 aged of at least 60 days. 



RMS Request 000000000116159 aged of at least 60 days 


DATE: 03-07-2008 

CLASSIFIED BY 60322uclp/stp/rds 

REASON: 1-4 (c) 


bl 


(S) 


Division (Required) : 
Program (Required) : 



mis) 

DECLASSIFY ON: 08-07-2033 

Unit (Required) : 

1 It eiiC ('Requi red) : 




1 



Classification : 

Secret 




536870924 : 

2000104 ; 


f S \ 


ALL INFORHATIOH CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
NHERE SHOUN OTHERWISE 


28 





From: 

Sent: 

To: 

Subject; 


Request Managment System I | 

TufiRrtav February 20, 2007 11:20 AM 

I^IWS Request 000000000115736 aged of at least 60 days. 


:b7C 

b2 


RMS Request 000000000115736 aged of at least 60 days 


Division (Required) 
Program [Required) 
Unit (Required) 

Item (Required 
float ion 





TT7 

536870924 

2000104 



From: Request Managment System } 

Sent: Tuesday. February 20, 2007 V1:15 AM 

To: I I 

Subject: RMS Request 0000000001 16159 aged of at least 60 days. 


b2 


:b6 

:b7C 


RMS Request 000000000116159 aged of at least 60 days. 


Division (Required) 
Program (Required) 
Unit (Required) 

Item (Required) 
r:1a.<?.qi f ixation 


smi 


Secret 


](S) (S) 




bl 



TTZ 

536870924 

2000104 








s 


T 



Subject: RMS Request 0000000001 1 5736 aged of at least 60 days. 


RMS Request 000000000115736 aged of at least 60 days. 




RMS Request 000000000116159 aged of at least 60 days. 




30 







RMS Request 000000000115736 aged of at least 60 days. 





Read below and execute ASAP! 


Thanks, 


Operational Technology Division 
Digital Evidence Section 
Cryptologic and Electronic Analysis Unit 
Software Develo pment Group 
(desk) 

(cell) 

(fax-unclass) 


b2 

bS 

b7C 








Subject; RMS Request 000000000115736 aged of at least 60 days. 


RMS Request 000000000115736 aged of at least 60 days. 







From: 

Sent: 

To: 

Cc: 

Subject: 


I STITT^S i^TS^TTSI 


|(OTD)(FBI) 

w?i ?n riR^ i7PM 

(H O) (FBir 


b 6 

b7C 


mipDii 


HO) (FBI) 


^ ~| f OTD)(FBi) 

](HO)(QGA) i 


](HO) (OGA): 


RE: INORMATION TO CEAU RE CIPAV REQUEST 


SECRET 

RECORPf 


DATE: 06-05-2003 

CLASSIFIED BY 60322ucip/st:p/i:ds b7A 

REASON: 1.4 (c) 

DECLASSIFY ON: 06“05~2033 


I know that some of our requests are already in the process of being c ompleted. However. I just wanted to 
document the telephone conversation that my engineers and I had with I l in this email. Thus, per our telephone call, 
the attached word document contains the requested information that we discussed. 



houstonquestlons.d 

Oc(26KB) all information CONTAINED 

HEREIN IS UNCLASSIFIED EXCEPT 

Thanks for the quick response, nhere shoot otherwise 

Kd 


•Original Message- 


I 


From: 

Sent: 

To: 

Cc* 

Subject: ‘ [NOHMAIION 

Importance; High 


](HO) (FBI) 


Thursday. Decemb er 21, 2006 2:43 PM 
l(OTD) (FBI)i 


JHO) (FBI) 


CEAU RE aPAV REQUEST 


^OTDXFBn 
jRHO) (OGA);r 


SECRET 
RECORD [ 


b7A 


](HO) (OGA){ 


be 

b7C 

Jho) (rei) 


(S) 


Please call if you have any fijrther questions. 

S A I 

Ho uston Squad CT-S 

( 0)1 

(C)| 


be 

b7C 

hZ 


DERIVED FROM: G-3 FBI Classification Guide G»3. dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON; 20311221 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintellioeiice Investigations 
DECLASSIFY OH: 20311221 




s 



From: 

Sent: 

To: 

Cc: 

Subject: 




DAli:: 06-05-2003 

CLASSIFIED BY 6Q322ucip/3tp/rd3 

EEASOH: 1.4 (c) 

DECLASSIFY OH: 06-05-2033 


[ 


](HO) (FBI) 


Thiircriav nprpmhpr71 2:56 PM 

(HO) (FBI);C 


b6 

:b7C 


rnTnuPRh 


](OTD) (FBI): 


]hO) (OGA); 


TFHD 

RE: INORMATION TO CEAU RE CIPAV REQUEST 


}hO) (OGA); 


](HO) 


SECRET bVA 

RECORD I I 



Thanks, 



b6 

;b7C 


— Original Message — 


[ 


](HO) (FBI) 


From: 

Sent: 

To; 

Cc: 

Subject: INORMATION TO CEAU RE CIPAV REQUEST 

Importance: High 


Thursday. Decemb er 21, 2006 1:43 .PM 
(OTD) (FB I): I 
HO) (FBI): I 


I(0TD)(FBI1 


J(TO) (OGA)I 


](HO) (OGA)[ 


][HO) (FBI) 


SECRET 

record[ 



SA I 

Ho uston Souad CT-5 

(01 

(C) 


b6 

b7C 

b2 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20311221 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1^97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20311221 

SECRET 


34 


ALL INFORHATION COHTAIHED 
HEREIN IS UNCLASSIFIED EXCEPT 
NHERE SHOUN OTHERWISE 




From: 

Sent: 

To: 

Cc: 

Subject: 

Importance: 


OTD) (FBI 


DATE: 06-05-2008 ' 

CLASSIFIED BY 60322uclp/3tp/tds 
REASON: 1.4 (c) 

DECLASSIFY ON: 06-05-2033 


I (HO) (FBI) 

Thursday, Decemb er 21, 2006 2:43 PM 

l_ i(OTD) fFB I);! 

tHO) (F Bnr 

, I (HO) (FBI) 

IhJORMATION TO CEAU RE CIPAV REQUEST 

High 


^OTD)(FBT 

') (OGA)r 


i>7C 


SECRET 

RECORD 315N-HO-48593 


Ho uston 

(O 

(c: 


iad CT-5 


b6 

b7C 

b2 


DERIVED FROM: G-3 FBI Classification Guide G>3, dated 1/97, Foreian Counterintelliaence investiaations 


DECLASSIFY ON: 20311221 
SECRET 


OTD) (FBI 


From: 

Sent: 

To: 

Cc: 

Subject: 


1 (OTO) (FBI) 

Thursday, December 14, 2006 11:05 AM 

I /OTD1 (FBI), 

nOTD I (FBI): I 

(FBDl KOTD) (FBU 


SENSITIVE BUT UNCLA8SIFIED 
RECORD 268-HQ-13tiS912-SDG 


:OTD)(FBI); 


(S) 












lOTD) (FBI) 


From: 

Sent: 

To: 

1 I(OTD) (FBI) 

Tuesday. November 28. 2006 5:14 PM 
1 ItnTDUFBIV 


hlC 

Cc: 

|~ |(OTD) {FBOr 

l(OGC) (FBI)J 

(OTD) 


(m 


b6 

Subject: 

FW: CIPAV court orders - Re 

1 (Case Agent 

1 b7C 


Importance; 


High 


h7A 


Follow Up Flag: Follow up 

Flag Status: Completed 


SENSITIVE BUT UNCtASSfflED 
NON-RECORD XX 


DATE: 08-07-2003 

CLASSIFIED BY 60322uclp/3tp/i;d3 

BEASOH: 1.4 (c) 

DECLASSIFY OH: 08-07-2033 


bl 


I I will address this with the case agent and send a reminder, 
is the POC and he will coordinate with the field. 

I 

If you have questions please give me a call. 



( S ) 

b6 

b7C 


Unit Chief, Cryptologic & Electronic Analysis Unit (CEAU) 
Digital Evidence Section 
Operational Te chnology Division 


All DIFORMATIOK CONTAINED 
HERE in IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


— Original Messaqe 

From: L 

Sent; 

To; I 

Cc: I 

Subject; 
Importance: 


l(OGC) (FBI) 

T.iAcHav Novanba- 2006 4 :54 PM 
10 


RE: aPAV court oriiers - Re[ 
High 

SENSITIVE BUT UNcjlA^FIED 
NON-RECORD 7’ \ 


nOTDVFBl )J r < 

(FBiiEZZZZTjc 

irders - Re l 


OTD) (FBI) 
OTD) (FBIi. 


Agent [ 


b6 

b7A hlC 
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Office of the General Counsel 

Ff^ripraLRiirMii nf InygiQHgafinn 

Ph 

Cell j —I , 

Ph 

Fax I 


— Original Message- 

From: 

Sent: 

To: l 1 

Subject: 


SENSITIVE BUT UNCI 
NON-RECORD / 


f SLXFBn 

ler 17, 2006 6:54 PM 
kaGQ(FBI) 


[SIRED 


(S) 













DATE: 06-05-2008 

CLASSIFIED BY 60322uclp/stp/r:d3 



From: 

Sent: 

To: 

Cc: 

Subject; 


SECRET 

RECORD 


](OGC) (FBI) 


Monday. Novembe r 20, 2006 1 2:23 PM 

i\ 


(QTD> rFRIV 


l(OfbJ (FBi)l 


10TD)(FBI) 


be 

b7C 


J 


IfOTPI (FBI1 

|\FFIANT: C 


l(OGC) (FBI):[ 


]CASE AGENT; 


(S) 


b7C 


1 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau of Investigation 


Ph- 

Celll 

Ph f Secured -f 


Fax'! 


] 


ALL IKFORHATIOK CONTAINED 
HEREIN 13 UNCLASSIFIED EXCEPT 
tJHERE SHOtIN 01HERNISE b2 

b6 

b7C 


b7A 


-Original Mess age — 


From: 

Sent; 

To: 

Cc: 

Subject: 

SECRET 
RECORD r 


I , I COTD) (FBI) 

Monday. Novembe r 2072006 1 1:06 AM 

, 1 . - - -J(HO) (OGA);CZIZ 

t IfQTh^ rPBT W 


)) (FBI);[ 


loTD) (FBI); 


b6 

"b7C I (FBI) 



rCASE AGENT 


i 



\ 


(S) 


bl 


■Original Message 


From: 

Sent: 

To: 

Cc: 

Subject: 

SECRET 

RECORDI 


](HO) (OGA) 


Monday, November 20, 2006 10:21 AM 

I _ [H O) (FBDl 

(OTDHFBI)t ^ ^ 


JHO) (FBI)£ 




jfHOI fOGAlL. 

AFFIANT: I I NCASE AGENTJ 


(S) 


Jho) (fbdC 
~IhO) (FBI)f 


] 


Ih^woga) 


b7C 


Here are the orders. 







Cc: 

Subject: 

SECRET 

recordI 


K OGOfFBI) 

Tiber 17 ?0Qfi 5:13 PM 

■■■ IfpTP) (FBI); H 

J(HO) (FBIli. 

, r SR fFBIvI 

i(SF) (FB );1 



KSR (FBn: l 

)IV09_RSAJJNn;_OGC 
AFFIANT:L rCASE agent! 


Management and Program Analyst 
OGC/NSLB/FISA Unit 


Room 7291 


DERIVED FROM: Multiole Sources 


DECLASSIFICATION EXEMPTION 1 


SECRET 


DERIVED FROM: Multiole Sources 


DECLASSIFICATION EXEMPTION 1 


SECRET 


DERIVED FROM: Multiole Sources 


DECLASSIFICATION EXEMPTION 1 


SECRET 


DERIVED FROM; Multiole Sources 


DECLASSIFICATION EXEMPTION 1 


SECRET 


s 













OTD) (FBI 


From: 

Sent: 

To: 

Cc: 

Subject: 


l{OTD)(FBI) 

Novembe r 07, 2006 8:17 AM 

I (OTD) (FBI! 

k,QGg) (FBI): ! 

I(S) 





— Original Message — 

From; \ l (OTPUFBI1 

Sent: Monday, November 06, 2006 6:29 PM 

To: t KOTPyFBn 

Cc: I IfTTO/ FBn 

Subject: Fwl I bl 


SENSITIVE BUT UNCI 


SSfFIED 


48 




bl 



b6 

b7C 

b2 
















Subject: 


SENSITIVE BUT UN C 

recordI 











From: 

Sent: 

To: 

Subject: 


UNCL^IFIED 

NOfl-RECai^ 



b7A 



Sorry, I should have included you on this email... 



Science and Technology Law Unit 
Office of the General Counsel 



b6 

:b7C 

b2 












hi 



Hope this helps, 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 


Fed eral Bureau of In vestigation 
Phj 
Cel^ 


Ph ( Secure) - 
Fax i 


DATE: 06-25-2008 

CLASSIFIED BY 60322uclp/stp/rds 

PEASOW: 1.4 (c) 

DECLASSIFY ON: 06-25-2033 


b2 

b6 

b7C 


ALL lUFOPKATlQH COSTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 


--•Original Message- 

From: t 


FJBERE SHODM OTHERWISE 


Sent: Tuesday. Octote r 31, 2006 iQ:S4 am 

To: I " Imcg 

Cc: I Iren fFBn 


](CyD) (FBI) 


tOTT^ (FBI) 


NO) (FBIil 
IiCyD)(FBI)£: 


Subject; 




(F8I);i 

_lMi(FeiCII 

J(PG) 


b7A 


b6 

hlC 


^D) (FBI)^ 




ICCvD) (FBI);t 


□(a) (FBI); 

mmi. 


'b6 
b7C 


Z 2 


UNCLASSIFIED 

NOhf:RE<rORD~ 



b6 

b7C 


I am deployed to Cincinnati for the above referenced investigation 


Cincinnati. 

Per our conversation 


J based in 

b7A 


the best background serial for the case is 


} 


bl 



We should get a draft application to you soon. 






Cyber Action Team Unit 
Computer Intrusion Section 
Cyber Division 
Room 5931 

935 Pennsylvania Avenue 
Washington, D.C. 20535 




The information transmitted is intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, dissemination, or other use of, or taking 
of any action in reliance upon, this information by persons or entities other than the intended recipient is 
prohibited. If you received this in error, please contact the sender and delete the material from any computer. 






56 



























SLJTTF 

I (cell) I 

« File; language on warrant, wpd » 1 
— Original Message — L— 

From; I ~\ (SL) (FBI) 

Sent! Wednesday. Septem ber 27, 2006 1 1 ;26 AM 

To; 1 IrSLVFBn 

Subject: FW: | 

SECRET 

RECORQ 


b6 

b7C 


(S) 


Oriq fnal Message — 

From; I l (OTD) (rei) 

Sent: Tuesday, September 26, 2006 11:22 AM 

To: r rrr rSLH FBn I 

Cc: I roTD^ (Fmi 

Subject: RE. I 

SECRET 

RECO RD 


-b6 

b7C 


(OTD) (FBI) 


Let me take a minute to introduce myself. ! am i I the new p rogram manager for th e Software 

Development Group (SDG). SDG handles all software deployments in | ^I nvestigations for b2 

CEAU. Please contact me for all future inqueries regarding your case. My contact info is as follows: b7E 


Supervisory Special Agent 
Operational Technology Division 
Digital Evidence Section 
Cryptologic Ele ctronic Analysis Unit 
office) 
cellular) 


h6 

hlC 

h2 


— Original Messa ge- 

From: 

Sent; lyj 

To;|. ZI 



Subject; RE 

SECRET 

RECORD^ 


l(SL)(FBI) 

^ay, Septe mber 26, 2006 9:27 AM 
OTD) fFBn J _ f SlVFBH 

OTD) KQTD^ 


I I thanks yet again for the good insight and inf o I'r 


lat makes our cnminal case a 


iip-pocKei disfupiion 


We'll get to work on this end and keep you guys in the loop as we go. Would you prefer we deal with 
someone else in your unit for the day-to-day aspect of this case? 


Talk to you soon 


be 

b7C 


59 







b6 

hlC 

b2 














— Original Message — 

From: I if SLVFsn 

Sent: Friday, September 22, 2006 9:12 AM 

To: I " lY«;i-u’FRn 

Subject: FWil 


SECRET 

RECORD 


— Original Message 

From: I I SLVFBn 

Sent: Thursday, Septembe r 14, 2006 10:21 AM 

To: [. IgLXFBD i 

Cc: J , IfOTD^ 

Q slhfbi) 

Subject: RE: } 

SECRET 

RECORD 


pjD) (FBI 
(SL) (FBI); 



SL) (FBI) 


And with the attachments... 

« File: language on warrant. wpd » 

SECRET 


RECORD 


(U) Ref our telcalfon Tuesday, as you requested, I have attached the draft 
affidavit/warrant lanauaqe we are olannine to use (if we can clear all the hurdles) for 


[Aiso, here is a short version of 

e case tliat details wiiat we are trying to do with this technique. 


X 


X 














62 





DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 
Investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterinlellioence 
Investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 
Investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 
Investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreion Counterintelligence 
Investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 
Investigations 

DECLASSIFICATION EXEMPTION 1 
SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFICATION EXEMPTION 1 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFICATION EXEMPTION 1 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFICATION EXEMPTION 1 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFICATION EXEMPTION 1 

SECRET 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 
DECLASSIFICATION EXEMPTION 1 
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s 


T 




















(OTP) (FBI) 




From: 

Sent: 


~l: OGC) (FBI) 

Monday, September 1 1 , 2006 2 :16 PM 


b6 

b7C 


1 

Cc: 

1 ^(OTD) (FBlir" 

lOTD) (FBI); I 

Subject: 

l(OTD) (FBI) 
Kb: Model language 

DATE: 06-06-2008 

CLASSIFIED BY 60322uclp/stp/rds 

SENSITIVE BUT UN^tASSlFIED 

FEASON: 1.4 (c) 

DECLASSIFY OK: 06-06-2033 


NON-RECORD 



Science and Technology Law Unit 
Office of the General Counsel 
Fed eral Bureau of In vestigation 
Ph4 
Cell 


ALL INFOPHATIOH COMTAIHED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


Ph ( Secure) - 
Fax - I 


— Original Message — 

From: I ~! fCvD) (FBI) 

Sent: Friday. Septemb er 08, 2006 5:01 PM 

To: I ~l (OGC) (FBI) 


Subject; FW: Model language 

SENSITIVE BUT UN^bAS^F IED 
NON-RECORD 


b2 

be 

b7C 


•Original Message — 


From: 

Sent: 

To; 

Subject; 


[ 


](OTD) (FBI) 


Friday. September 08, 2006 1:20 PM 
1 t CyP) (FBI) 

FW: Model language 


72 


SE8^T 




SENSITIVE BU T UNC 
NON-RECORD 



IFIED 


Model languages previously provided from the Case Agent. Reference previous email. 


— Original Message — 

From! < | <^i VFRT’! 

Sent: ini'/ in 7nnc 6:13 PM 

To: I |(OTD) (FBI) 

Subject; RE: Model language 


SENSIT IVE BUT UN 
RECOR 








IFIED 


he 

hlC 


hi A 




File:, language on warrant.wpd » 


— Orig inal Message — 

From: 1 t OTD^ (FBI) 

Sent: Mnnriav Mav ig. 7f)nfi 10:32 AM 


To: I 

Subject: Model language 

SENSITIVE BUT UNC 


1 


SL)(FBI) 


NON-RECORD 



lED 


(SJ 


he 

hlC 


« File; Model CIPAV honeytoken Affidavit.wpd » 

ZD 

I will talk with my team le ader this afternoon. . . not sure if this is what you were looking for or not. Also, NSLB has b2 
model languages used inj ] but they may include language that may not be used in the b7E 

criminal matters. 


SSA[ 




Secure Technologies Exploitation 
Cryptologic and Electronic Analysis Unit 
Operational Technology Division 
Enotneerino Res earch Facility 
voice 
STU lit 

fax (non-secure) 
fax (secure) 


h2 

b6 

b7C 









— Original Messa( 

From: I 

Sent: wedi 

To: 


J(OTD) (FBI) 

• 2006 2;02 PM 
KSLXF8I) 


Subject: 


RE: Model language 


SENSITIVE BUT UNCLASSIFIED 
RECORd I 







SENSITIVE BUT UNCb^SSfFIED 


SENSITIVE BUT UNCb^SStFIED 


SENSITIVE BUT UNCtai^SSffTED 


SENSITIVE BUT UNCLkS^IED 







J(OTD) 







b6 

b7C 

DATE: 06-25-2008 

From: 



fOTD) (FBI) 

Sent: 

To: 


Friday. June 23, 

2006 4:24 PM 
J(OTD) (FBI) 

Cc: 


I 

__I(OTD)(FBI) 

CLASSIFIED BY 60322uclp/3tp/rds 

Subject; 


CIPAV inquiry 


PEASOH: 1.4 (c) 

DECLASSIFY ON: 06-25-2033 

secret 

RECORD 268-HQ 




(S ) 



DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20160623 

SECRET 





From: I ~ K OTDVFBI) 

Sent: Tuesday, June 20, 2006 2:49 PM 

To: I" t MM^ (FBI) 

Subject: RE: | j needs a password 


SENSITIVE BUT UN^^S^IED 

non-record" \ 


ALL INFORKATION COHTAINED 
HEPEIN IS OTCLAS3IFIED EXCEPT 
mEPE SHOOT OTHERWISE 


b6 

b7C 




Give me a call if that doesn't work. 


As I understand the warrant expires 22 June? 
Has the person replied at all? 

J... 

i ■■ = 

Information Tecfmology Specialist 


bl 


b6 

b7C 


80 




6 

7C 

2 


— Original Message — 

From: I If OTD^ (FBI) 

Sent: TiiP-tfiav innp 70 ?onfi 11:31 AM 

To: riQTpVFBI^ 

Cc: I fMM) (FBI) 

Subject: h eeds a password 

Importance; High 

SENSITIVE BUT UNCLASSIFIED 
NON>RECORD 


b6 

b7C 




Cryptologic and Electronic Analysis Unit 
Operational Technology Division 

PnninA^rinn Racoarrh Facility 

voice 
STU III 

fax (non-secure) 
fax (secure) 


AIL IJIFOPHATION CONTAINED 

HEHSIN IS UNCLASSIFIED 

DATE 06-25-2008 BY 60322ucip/stp/rcla 


b2 

b6 

b7C 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


OTD) fFBJ 


From; 

Sent; 

To: 

Subject: 


1 0TD)(FBI) 
‘sdav. June 20 2006 1:06 PM 

I--' (FBI) 

I meeds a password 


b6 

b7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Will do.... 


Information Technology Specialist 
Ooerat onal Technology Division 
Office • 

Mobile 

Pager 


b6 

b7C 

b2 


. — Original Message — 
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From: 

Sent: 

To: 

Cc: 

Subject: 


(OTD){FBI) 
Thursday, June 01. 200 6 10:56 AM 


b6 

b7C 


RE:^ 


llQIO) (FBI) 
(OTD) (FBI); 


ROTD) (FBI): 


SENSITIVE BUT UNC 




(S) 


hi 


IFIED 


NON-RECORD 


bl 

(S) 


J.,. 


Information Technology Specialist 

DATE: 06-10-2008 

CLASSIFIED BY 60322ucip/stp/rds 

REASON: 1.4 (c) 

DECLASSIFY ON: 06-10-2033 


Operational Technology Division 


b6 

O 

M 




b7C 

b2 


b6 

b7C 


ALL INFORHATIOig CONTAINED 
HEREIN IS mrCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


(SI 


-Ongina) Message 


Fromj 

Sent: 

To: 

Cc: 

Subject; 


](OTD) (FBI) 


Wednesday, May 31, 2006 9:23 AM 

IrOTDV FBn 

tOTD^ (FBI ); 

FWl 


SENSITIVE BUT UNCtAS^FIED 
NON-RECORD \ 


(S) 


loTD) (FBI) 


bl 


— Original 

From: 

Sent; 

To; 

Cc: 

Subject: 


1 




](MM) (FBI) 

Tuesday, Mav 30. 20 06 3:34 PM 

(OTD) (FBI) 
IM) (FBI) 

mw 




SENSmVE BUT UN^bAS^IED 
NON-^CORD \ 


he 

hlC 


T 


83 








SENSITIVE BUT UNCbftS^FIED 


SENSITIVE BUT UNCLASSIFIED 


ICtA^l 


SENSITIVE BUT UNCbAsilFIED 

1 -.:. 




From: 

|(OTD)(FBI) 

Sent: 

Thursdav .lunft 01 2006 10*45 AM 

To: 

l(OTn) (FBI) 

Cc: 1 

UOTD) (FBI) 

Subject: 

Kb| 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD \ 



b6 

b7C 


hi 



I I 

Information Technology Specialist 
Op erational Techno logy Division 
0-1 1 
M- 


b6 

b7C 

h2 


— Original 

From: 

Sent: 

To: 


X 




b6 

b7C 


loTO) (FBI) 


W<»rini»5;dav. May 31. 2006 9:23 AM 


\l, 2 ( 


V.V« 

Subject: FWj 

^ 

7 ^ 

SENSITIVE BUT UNCT:ASSIFIED 


NON-RECORD 



|(OTD) (FBI) 


hi 
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-bl 


Sent: 
To: 

Cc: 

Subject: 


Tuesday. Mav 30. 2006 3:34 PM 
OOTO) (FBI) 
JO^M) (FBI) 


CIPAV 


hlC 


SENSITIVE BUT UNCbAS^FIED 

non-record' \ 




SENSITIVE BUT UNCLASSIFIED 




SENSITIVE BUT UN HED 




85 


ALL IHFOFMATIOIJ COHTAIHED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 








— Original Message — 

From: I I fOTD) (FBI) 

Sent! Wednesday. May 31. 2006 5:01 PM 

To: I IroTDi rFBn 

Cc; I l OTD^ (FBI);[ 

Subject: RE: Philly Deployment 

SENSITIVE BUT UN^rAfi^FIED 
NON.RECQRD X~ 


](OTD) (FBI){ 


(ITD) (FBI) 


b6 

b7C 


be 

b7C 

b2 

b7E 


— Ori ginal Message 

From: I - - jf QTPVFan 

Sent: Wednesday. Mav ll. 2006 3:29 PM 

To; L "QTD) (FBI) 

Cc! \ l(OTD) (FBI); 

Subject: Philly Deployment 

SENSITIVE BUT UNbtJlC^IFIED 
NON-RECORD X X~ 


JOTD) (FBI); 


klTD) (FBI) 


(S) 


bl 


J., 


Information Technology Specialist 
rational Technology Division 



be 

b7C 

b2 


SENSITIVE BUT UNCI IFiED 


SENSITIVE BUT UNCL^SIFIED 



SENSITIVE BUT UNCLASSIFIED 


/ 



86 








REASON: 1.4 (c) 

DECLASSIFY ON: 06-06-2033 



WHERE SHOWN OTHERWISE 


I. please see below for a deolovrnent scenario for CIPAV. 

hlC 

Warrants are being signed soon. 




T 





SENSITIVE BUT U NCbASSIFIED 


N^bAS^ 




SENSITIVE BUT UNCbic^lFIED 

non-record' X \ 


bl 

(S) 


— Original Mess age — 

From; ^ 

Sent; Tuesday^ May 30, 2006 3:34 PM 

I * 

Cc: I 

Subject; QPAV 


](MM) {FBI] 
o 3:34 PM 
JOTD) (FBI) 
JMM) (FBI) 


SENSITIVE BUT UN^M^IFIED 

nqn-recorF 


b6 

b7C 



CIPAV Aff.wpd (66 CIPAV SW 

K6) ppUcation.wpd (31 . 


SENSITIVE BUT UNCtA^FIED 
— 

SENSITIVE BUT UNcbsk^lFIED 



88 





From; 

Sent: 

To: 

Subject: 

Importance: High 

DATE: 08-07-2003 
CLASSIFIED BY 60322ucip/3tp/rds 
REASON: 1.4 (c) 

DECLASSIFY ON: 03-07-2033 

b6 
b7C 


{OTD) (FBI) 

ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOOT OTEiERNISE 



[OTD) (FBI) 

Pri2:16PM 

|(OTD) (FBI);i 

5Q (FBI) > 

rOPTEN FUGmVE info 


SENSITIVE BUT UNCD 
NOMBECORD 7 


•SIFIED 



□OTD) (FBI) 

,12:18 PM 
kOTpKFBI) 

IrOP TEN FUGITIVE info 


lOTD) (FBI) 

Friday. May 26. 2006 12:03 PM 
I (SU) (FBI) 

CIPAV Pontes, 

High 


SENSITIVE BUT UNCI 
NON-RECORD / 


;fFIED 


b6 

b7C 


A pleasure speaking with you... let us know if you need anything in the interim, or have questions. 



have been advised of this and are also available to assist you if I am 





unavailctcre: 




ssaI 

Securi lycnnoiogies txprortatio 
Cryptologic and Electronic Analysis Unit 
Operational Technology Division 
Enoineerino Rep arch Facility 
Loice 
BTU III 

(non-secore) 
ax (secure) 


b2 

b6 

b7C 



Subject: FW: Web Bug*.. 


UNCLASSIflED 

NON^COl^ 



FYI 


b6 

b7C 


bl 

(S) 


— Original — 

From: I I (OTD) (FBI) 

Sent: Tuesday. Mav 23, 2006 1:16 PM 

To: I I (PH) (FBI) 

Subject: kt: weo bug... 

unclaSsif^ 

NON^CO^ 


Great.. . that simplifies matters considerably. 
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— -Original Messann ^ 

From: | t PH) (FBI) 

Sent: Tuesday- May 23. 20q6 1:06 PM 

To: I K oTD) (FBI) 

Subject: FW: Web Bug... 

UNdt:ASSt1<ED 

NOM^ECtH^ 



be 

b7C 


Great, I will forward this to them... It would be consent from the owner.. 
Thanks, 



Original Message- — 

From: |(OTD)(FBI) 

Sent: Tuesday, May 23. 2066 12:11 PM 

To: I rPHUFBO 

Cc: I l (OTD) (FBI):f 

Subject: RE; Web Bug... 

UNCL^gfflflED 

NON>F(ECGft5~ 


]{OTD)(FBI) 


I Thanks for the inquiry. As ! [ has moved on, I am covering his area of interaction. Your case may be a 
good case for the CIPAV tool, as described below. Please get with your TTA and discuss this, and we will be glad to 
assist. It appears that you may have consent from the owner of the account? 


Here is the information on the CIPAV: 


Have your TTA get in touch with us and we will proceed from here. Glad to help you! 
Thanks, 


SSA 

Secure Technologies Exploitation 
Cryptologic and Electronic Analysis Unit 
Operational Technology Division 
Cnninaahnn Pncsarch Facility 
l/oioe 
I5TU III 

ax (non-secure) 
ax (secure) 


b6 

b7C 

b2 



bl 


(Computer & Internet Protocol Address Verifier) 



91 















IFIED 




IFIED 


UNCLASSIFIED 



From: 

Sent: 

To: 

Cc: 

Subject: 


OTD) (FBI) 


1 (OGC^ (FBI) 

Wfidnftsdav May 2006 3:27 PM 
I , (OTD){FBI) 

^ GotFBnr 

RE: PH matter 06-582 - New Concern 



[OTD) (FBI) 


SECRET//NOFORN 
RECORD 31 S 


Thanks for the update r~~l 


DATE: 06 - 26 - 2 QQ 8 

CLASSIFIED BY 60322uclp/st.p/i:d3 

REASOH: 1.4 (c) 

DECLASSIFY OIT: 06-26-2033 


think its time to share this with the case agent to see which way they want to go. . . 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Federal Bureau of Investigation 

P M J 

Ph (Secure) I 
Fax-i I 


ALL INFORHATIOir COHTAIKED 
HEREIH IS UNCLASSIFIED EXCEPT 
WHERE SHOW OTHERUISE 


— Original Message — 

From: I I (OTD)(FBI) 

Sent: ■ Mav ?, 4 , 2006 12:59 PM 

To: >GC)(FBI);LZZI 

Cc: 1 |(OTD) (FBl);| 

Subject: RE: PH matter 06-582 - New CofeSff 

SECRET//NOFQRN 
RECORD 315 


^OTD) (FBI); I 
RoGQ (FBI) 


:iTD) (FBI) 








be 

bVC 

b2 


Information Technology Specialist 
Operational Techr^oloov Division 
O- 
M- 



— Ori ginal Message 

From: [ 

Sent: 

To: 


]OGC)(F 8 l) 


\A/oHn^cH^w IQ^^SS 

OTO) {FBO; 


Cc: 

SubjectrT^ CT W ma fee r 0 6-^82 ’ New Cohttlfl 


OTD) (FBI);[ 




^UD) (FBI){ 
JOGC) (FBI) 


](OTt))(FBI) 


SECRET//NOFORN 
RECORD 315 



Assistant General Counsel 
National Security Law Branch 
Office of General Counsel FBI 


Voice 

b2 

Pager 

b6 

Secure Fax 

b7C 

Fax 



Original Mess age — 

From: | 

Se 
To 


s 


^OTD) (FBI) 


Cc: 

Subject: 


wegnesoav. nav 8:49 AM 

Ima (FBD: I IfO TDKFBnr 

J^nr oGCUFBn 


tOTD) {FM)i 


FWT PH matter 06-582 - New Gjncem 


SECRET//NQFORN 
RECORD 315 


]0GC)(FBI) 


bl 



b 6 


— Original Messaflfi=; 

From: | 

Sei^t: lues 

To 
Cc 




ioGC)(FBI) 


Subject: 


iSitoy, May 23 , 2006 5:42 PM 
□ (OTD) (FBI){ 
j(OTD 


OTD) (FBI) 

RE: PH matter 06*582 - New Concern 


](OGC) (FBI) 


b7c 


SECRET//NOFORN 
RECORD 315 











I I 

Assistant General Counsel 


National Security Law Branch 



Counsel FBI 



Voice 



Pager 

b2 


Secure Fax 

b6 


Fax 

b7C 


— Original M 

From: 

Sent: 

To: 

Cc: 

Subject: 


fe s^e^ 


](OTD) (FBI) 






I KOTO) (Ffl 

IJ 


rOGC)(FBI) 


RE: PH matter 06-582 - New Concern 


SECRET//NOFORN 
RECORD 315 



bl 


SSA | I 

Secure TechooTogies ^xploilalion 
Cryptologic and Electronic Analysis Unit 
Operational Technology Division 
Engineering Res earch Facility 


voice 
STU m 

ax (noH'Secure) 
ax (secure) 


h2 

he 

hlC 


— Original M 

From; 

Sent: 

To: 

Cc: 

Subject: 

Importance: 


essa oe — 

I loGC) (FBI) 

M=xw -7nnc 3;53 p(W| 


1oGC)(FBI) 


(OTO) (FBI); 


FW: PH matter 06-582 - New Concern 
High 


](OTD) (FBI) 


SECRET//NOFORN 
RECORD 315 


bl 


(S) 











Thanks 



hi 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fed eral Bureau of I nvestigation 

Ph-[ L, , 

Ph f Secured -I I 

Fax - I I 


b6 

-b7C 

b2 


— Original Mess age — 

From: 1 - I fCTP^ (FBI) 

Sent: Monday. Mav IS. 2006 10:45 AM 

To: I l (OTD) fFBn i 

I K OGO (FBI) 

Cc; DICLEM^TE, AIWHONY P. (OTD) (FBI) 


Subject: RE: PH matter 06-582 


](OTD) fFBH: ! t OGQIFBI): b6 

b7C 


SECRET//NOFORN 
RECORD 31 S 


However, any rewording may or may not be accepted by the FISC as OGC has advised. 

Or the presentation of acceptable rewording would take months such as our experience with PG's 
case that is still unresolved. 


FBIHQ/CTD/LX1 
ITOS 1 /CONUS 1 
Rm 4W158 
Desk 
Pgr 

Internal Secure 



b2 

h6 

b7C 


— Original Mess age — 

From: | |(OTD) (FBI) 

Sent; Monaay, way ib, /006 10:39 AM 

To: I . IfCTDI (FB1); L k OTD) (FBI); t l 0GC)( FBI) ; 

I K OGC) (FBI) 

Cc: OICLEMEMTE, ANTHONY P. (OTD) (FBI) 

Subject: RE; PH mane 06-582 


SECRET//NOFORN 
RECORD 315 


(S) 




ss/l 



Assistant Section Chief 


bl 


97 


s 


J 





Digital Evidenc e Section, Operational Technology Division 
Ivoice 
Fax 
Cell 


b6 

b7C 

b2 


— Original Message — 


From: 

Sent: 

I l(CTD) (FBI) 

Mnnriav Mav 1 5 ?pOfi in;37 AM 



To; 

I OTD) (F8D1 

l(OTD) (FBI)i 

l(OGC) 

Subject; 

TFBnf KOGC) (FBI) 

FW: PH matter 06-582 




Importance: High 

SECRET//NOFORN 
RECORD 315 



cca| I 

FBIHQ/CTD/LX1 
1TOS1 /CONUS 1 
Rm 4W158 
Desk 
Pgr 

Internal Secure 


b2 

b6 

b7C 


— Original Message — 

From: I \ (OGa(FBl^ 

Sent: Friday. Mav 12. 2006 5;00 PM 

To: I KOG D (FBI) 

Cc: I ^f CTD^ (FBI) 

Subject; RE: PH matter 06*582 

SECRETZ/NOFORN 
RECORD 315 




Assistant General Counsel 
National Security Law Branch 
Office of General Counsel FBI 


Voice 
Pager 
Secure Fax 
Fax 


b2 

b6 

b7C 


— Original Mess age — 

From: | l (OGC) (FBI) 

Sent: Friday, May H. 20 06 4:29 PM 

To: I ‘n OGCUFBn 

Subject: FW: PH matter 06-582 

Importance: High 

SECRET//NOFORN 
RECORD 315 








bl 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fed eral Bureau of In vestigation 

Ph -L I 


b2 

b6 

b7C 


Ph ( Secured 1 
Fax H 


— Original Mess age — 

From; I I TQTD) (FBI) 

Sent: Friday. Mav 12. 2006 3:03 PM 

To: I _ [ OGC) (FBI) 

Subject: RE: PH matter 06-582 

SECRET//NOFORN 
RECORD 315 



bl 


— Original Message — 

From: I I fOTPI (FBI) 

Sent: .Friday May U, 2006 3:02 PM 

To: I l(OGC) (FBl)l |[OTD) (FBI) 

Subject: RE: PH matter 06-582 

SECRET//NOFQRN 
RECORD 315 



— Original Me 

From: 

Sent: 

To; 

Subject; 


ss aqe- — 

r l (OGC) (FBI) 

Friday. Mav 12. 2006 2:4pM 
I K OTD) (FBI),{ 


b6 

b7C 


FW: PH matter 06-582 


}0TD) (FBI) 


SECRET//NOFORN 
RECORD 315 


For your information. 






100 







s 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSiFY ON: 20310512 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON: 2Q310S12 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Ctassification Guide G-3. dated 1/97. Foreign Counterintelligence 

Investigations 

DECLASSIFY ON: 2031 051 2 

SECRET//NOFORN 


DERIVED FROM; G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310512 

SECRET//NOFORN 


DERIVED FROM; G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310S12 

SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20310S12 

SECRET//NOFORN 


1(OTD) (FBB) 


From: 

Sent: 

To: 

Cc: 

Subject: 


Wednesday . May 24. 2 006 1 :57 P 


l(OGC)(FBI) 

otd)(fbi):L 


he 

hlC 


lOTD) (FBI); 




](iTD) 


lOTD) (FBI): 


](OGC) (FBI) 


RE; PH matter 06-582 - New Concern 


SECRET//NOFORN 
RECORD 315 



Assistant General Counsel 
National Security Law Branch 


Office of General 


Counsel FBI 

Voice 
Pager 
Secure Fax 
Fax 


b6 

b7C 

b2 



— Original Message — 

From: I I fOTDUFBn 

Sent: Wednesday, May 24, 2006 12:59 PM 


102 



SECRET//NOFORN 


From: 

Sent: 

To: 

Cc: 

Subject: 


H(OTD) (FBI) 


Tiiftsdav May 7% 


1 


loTD) (FBI) 
6 3:04 PM 
TD) (FBI) 


RE: PH matter 06-582 


(OTD)(FBI) 




SECRET//NQFORN 
RECORD 31 S 


b6 

b7C 


Thanks. .. we'll see what we can do. 


. here is the case file number. 


Original 

From: 

Sent; 

To: 

Cc: 

Subject: 




](CTD) 


(FBI) 


TMAcHa'/ lOnfi 3;Q3 PM 

. (OTD) (FBI) 

IOTD)(FBI) 

RE: PH matter 06-582 


SECRET//NOFQRN 
RECORD 315 



ssaT 

FBIHu/l: I 
ITOS 1/CONUS 1 
Rm4W158 r 
Desk 
Pgr 

Internal Secure 


bl 


— Ori ginal Message 

Frt>m: | 1 (OTD)(FBI) b6 

Sent: Tuesday. May 23. ZoJs 2:^8 PM b7c 

To: I ^C TD) (FBI) b2 

Cc: 1 |:OTD){FBI) 

Subject: RE: PH matter 0b-b82 

SECRET//NOFORN 
RECORD 315 


Can you please provide a case number for us on this. 
Thanks, 

ssa| 

Secur B I Bc nn uioy i ti!} bx pit m ’ Jiio rr 



l-K) 





Cryptologic and Electronic Analysis Unit 
Operational Technology Division 

Facility 

loice 
BTU 111 

ax (non-secure) 
ax (secure) 



Original Mess^ 

From: i 

Sent: 

Toj 

I k OTP 

Cc: DiaEMENTE, ANTHONY P. (OTD) (FB1)(_ 
Subject: RE: PH matter 06-582 


r OTD) (FBI) 
lu^ay. May 16; 2006 9:15 AM 

n(CTDV(FBn;r 


i(£9: 


](OTD) (FBI); 


]OGQ (FBI)£ 


b2 

b6 

b7C 


](OGQ(FBI) 


3oGC) (FBI); 


]CTD) (FBI) 



SECRET//NOFORN 
RECORD 315 



Assistant Section Chief 

Digital Evidenc e Section, Operationai Technology Division 
woice 
Fax 
lell 



b6 

b7C 

b2 


bl 


— Original Message 

From: ^ 

Sent: ^ 

To: Ip 

Cc: 


Subject: 






(CTD) (FBI) 
06 4:59 PM_ 


]OGC) (FBI)( 


'TO)(FBI)r 


DIOEMENTE, AnTHONY P. (OTD) (FBI)f 
(FBI) 

RE: PH matter 06-582 




3oTD) (FBI)t 


rOGC)(FBI){ 


}0GC) (FBI)J 


Jctd) 


SECRET//NOFORN 
RECORD 315 



T*rr 


s 




bl 



(S) 


Thanks 


SSA 

FBIflSTCTDTOT 

ITOS 17CONUS 1 

Rm4W158 

Desk 

Pgr 

Internal Secure 


h2 

b6 

blC 


Original Mess age 

From: i 

Sent; 

To: 


Cc: 

Subject: 




loTD) (FBI) 
ms 10:39 


3r3b06 10:39 Aa 
^(CTD) (FBI);| 
jiSGC) (FBI) 


DICLEMENTE, ANDHONY P. (OTD) (FBI) 
RE: PH matter 06*582 


SECRET//NOFORN 
RECORD 31 S 


(S 



ss/ >| 

Assistant Section enter 

Dioitai Evidenc e Section, Operational Technology Division 


wolce 

Fax ti6 

bell b7C 

^ -b2 


— Original M 

From: 

Sent: 

To; 

Subject: 

Importance: 






Kinnfla^ May/ IS 3 


l(CTD) (FBI) 
D06 10:37 


I 


^OTD) (FBI) 
JOGQ (FBI) 




JOTD) (FBI); 


OGO(FBI); 


FW: PH matter 06-582 
High 


SECRET//NOFORN 
RECORD 315 




I 

FBIHQ/CTD/LX1 
!TOS 1/CONUS 1 
Rm 4W158 
Desk 


b6 

b7C 

b2 


S 


T 
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b2 

b6 

hlC 



Pgr 

internal Secure 


— Ofiglnal Mess age — 

From: 

Sent: 

To: 

Cc: . 

Subject: 




RETPHlTOrrSTW- 


OGQ(FBI) 
06 5:09 PM 
3C) (FBI) 
(CTD) (FBI) 
582 


SECRET//NOFQRN 
RECORD 315 


bl 


Asslsta nt denerar Counsel 
National Security Law Branch 
Counsel FBI 

Voice 
Pager 
Secure Fax 
Fax 




b2 

b6 

b7C 


— Original Message 

From: 

Sent: 

To: 

Subject; 
Importance: 


lOGC) (FBI) 

me 

JOG( 


,F,ririav.„M, ay., 1, 006 4:29 PM 

Q(FBI) 


FW: PH matter 06-582 
High 


SECRET//NOFORN 
RECORD 315 



AS5l§tsm bsn'eral Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fe deral Bureau of Inve stigation 


I 


Ph 
Ph {f 
Fax 




1 


t 


b2 

b6 

b7C 


Original Messanawrn 

From: ^(OTD) (FBI) 

Sent; Friday. MaviS. Sflbfi3:Q3 pm 

to; I t OTD) (FBI 

Subject; RE: PH matter 06-582 


OGC) (FBI) 


SECRET//NQFORN 
RECORD 315 
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bl 


Sent: 
To: 

Subject: 


Friday. May 12. 2006 3:02 
I t OGC) (FBl)l 

RE: PH matter 06-582 


OTO) (FBI) 


SECRET//NOFORN 
RECORD 315 


(S) 


b6 

b7C 


JOTD) (FBI) 


— Original Messfoeauu 
From: 

Sent: 

To: 

Subject: 


OGC) (FBI) 

FriHax/ 1 :) PM 


FW: PH matter 06^582 

SECRET//NOFORN 
RECORD 315 


3 PM 

OTD) (FBI)[ 


For your information. 


Assistant General Counsel 
Science and Technology Law Unit 
Office of the General Counsel 
Fe deral Bureau of Inves tigation 

Ph] I 

c..re\ 4 I 



b2 

b6 

b7C 


— Original Message — 

From; I ' t OGOCFB!) 

Sent: , Friday., ■Mau, .1,2., ,7flQ6 1:S2 PM - 

To: I ^ IctD) (FBI)I 

(OGC) (FBI) l 

Subject; PH matter 06-582 

SECRET//NOFORN bl 

RECORD 315 


JOGQ (FBl)j 


:OTD) (FB1);[ 


J(OGC) (FBI) 



i 
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SEeREJ 







Assistant General Counsel 
National Security Law Branch 
Office of General Counsel FBI 


Voice 
Pager 
Secure Fax 
Fax 


h2 

h6 

b7C 


DERIVED FROM; G-3 FBI Classification Guide G-3. dated 1/97. Foreion 


Counterintelliaence investiaations 


DECLASSIFY ON: 20310512 


SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreian 


Cou nte rintel liaence Invest nations 


DECLASSIFY ON: 20310512 


SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreian 


Counterintelliaence Investiaations 


DECLASSIFY ON; 20310512 


SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreian 


Counterintelliaence Investiaations 


DECLASSIFY ON: 20310512 


SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreian 


I -'4 
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T 


DERIVED FROM: G«3 FBI Classification Guide G*3. dated 1/97. Foreign CounterinteHiaence Investiqations 


DECLASSIFY ON: 20310512 
SECRET//NOFORN 


DERIVED FROM: G"3 FBI Classification Guide G-3, dated 1/97, Foreign Counterintelligence Investigations 


DECLASSiFY ON: 20310512 
SECRET//NOFORN 


OTD) (FBI 



From: 

Sent: 

To: 

Cc: 

Subject: 


UNCLASSIFIED 

NON-RECORD 


Web Bug. 


—□(QTD) (FBI) 
2006 12:11 PM 


(OTD) (FBI); 


OTD)(FBI) 


PATE: 08-07-2008 

CLASSIFIED BY 60322uclp/3tp/rds 

REAS02I: 1.4 (c) 

DECLASSIFY ON: 08-07-2033 


I Thanks for the inquiry. As h as moved on, I am covering his area of interaction. Your case may be a good 
r the CIPAV tool, as described befow. Please get with your TTA and discuss this, and we will be glad to assist. It 
appears that you may have consent from the owner of the account? 


Here is the information on the CIPAV: 

Have your TTA get in touch with us and we wilt proceed from here. Glad to help you! 


Thanks, 


Secure Technologies Exploitation 
Ciyprologic and Electronic Ar>alysis Unit 
Operational Technology Division 
Fnninpoiinq Facility 

voice 
STU III 

fax <non~secure) 
fax {secure) 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
T.IHERE SHONK OTHERWISE 


b6 

b7C 

b2 



(S) 


CIPAV 


Computer & Internet Protocol Address Verifier 







o/ 







ilcifetL 

I (OTP) (FBIl 


From: 

Sent: 

To: 

Subject: 


](OTD)(FBI) 


Ffidav, May 12. 2006 2: 05 PM 

l(QTD\ fFBJl 


]iS) 


•bl 


SECRE T// ORCO N.NOFORN 

(S) 

Thank j | 

J... 



— Original lyiessaon 

From: 

Sent: 

To: 

Cc: 

Subject: FW 

Importance: HigI 




l(OTD) (FBI) 

^-nday^ May Tz, AM 


TiTD) (FBI) 




(S) 


SECRET//ORCON.NQFORN 

RECQRd 



DATE: 06-26-2008 

bl CLASSIFIED BY 60322ucip/stp/'flio 
REASON: i.4 (cj 
DECLASSIFY ON: 06-26-2033 


ALL INFOPHATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
NHERE SHOUN OTHERWISE 

bl 


bl 


1 am sure that you guys are in the loop on this, but 1 wanted to forward this to you. 


b6 


— -Original Message- — . b7C 

From: I [ OTD) (FBI) 

Sent: Thursday, May ll, 2 006 7:11 PM 



To: 1 

ICTD) (FBnl 

tPHl fFBn 


(S) 

Cc: 1 

tPTDI fFBlil , 1 

Subject: 

r" 


bi 


SECRE1 

ri/ORCON.NOFQF:N_ 


RECOR 



1 ^ 

" r 


(U) Gentlemen. I'm sorry it took me a few days to get spun up on all fliis, but I have a sufficient grasp now to lay out 
what OTD can do in the subject matter. Of course, we want to support this effort any way we can within lawful 
parameters. At the risk of regurgitating that which is already known, let me lay it out from the basics (and please 
correct me where I stray): [ ^ 
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(U/tES) These are my thoughts on how we can get t his iob done. I'm sure I didn't get every detail right, so ple ase 
don't hesitate to challenge something I've said here. I I 

I aiso, I’ll be out of the office next week. Please contact 
absence. ' 

Regards, 


SS A I 

Cryptologic and Electronic Analysis Unit (CEAU), 

Digital Evidence Section, Operational Technology Division 
ERF Extension 
Oiiantirn VA 

tell lunsepiire) 


:b6 

b7C 

h2 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreian Counterintelliaence Investiaations 


DECLASSIFY ON: 20160511 
SECRET//ORCON.NOFORN 


DERiVED FROM: G-3 FBI Classification Guide G-3, dated 1/97. Foreign Counterintelliaence Investigations 


DECLASSIFY ON: 20160511 
SECRET//ORCON.NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreion Counterintelligence investiaations 


DECLASSIFY ON: 20160511 


SECRET//ORCON.NOFORN 


'4 






Rega rds, 


SS4 I I 

Cryptologic and Electronic Analysis Ur^it (CEAU), 

Digital Evidence Section, Operational Technology Division 
ERF Extension 
Qu antico VA 

tel: | l (unsecure) 


DERIVED FROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20160511 

SECRET//ORCON,NOFORN 


DERIVED FROM: G»3 FBI Classification Guide G-3, dated 1/97. Foreign Counterintelligence Investigations 

DECLASSIFY ON: 20160511 

SECRET//ORCON.NOFORN 
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